PT-2017-9769 · Moxa · Moxa Awk-3131A Wireless Access Point

Published 2017-04-13 · Updated 2017-04-20 · CVE-2016-8727

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moxa AWK-3131A Wireless Access Point (affected versions not specified)

Description An information disclosure issue exists in the Web Application functionality, allowing an attacker to retrieve sensitive configuration and system information without authentication by accessing a series of URLs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-8727

Affected Products

Moxa Awk-3131A Wireless Access Point

References · 3

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0241 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-8727 · Security Note
• https://osv.dev/vulnerability/CVE-2016-8727 · Vendor Advisory