PT-2018-15034 · Moxa · Nport W2X50A

Maksim Khazov · Published 2018-12-06 · Updated 2019-01-30 · CVE-2018-19659

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa NPort W2x50A products with firmware prior to 2.2 Build 18082311

Description An exploitable authenticated command-injection issue exists in the web server functionality. A specially crafted HTTP POST request to "/goform/net WebPingGetValue" can result in running OS commands as the root user.

Recommendations For Moxa NPort W2x50A products with firmware prior to 2.2 Build 18082311, update the firmware to version 2.2 Build 18082311 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/goform/net WebPingGetValue" endpoint to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-19659

Affected Products

Nport W2X50A

References · 4

• 🔥 http://seclists.org/fulldisclosure/2018/Nov/64 · Exploit
• 🔥 http://packetstormsecurity.com/files/150535/Moxa-NPort-W2x50A-2.1-OS-Command-Injection.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-19659 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19659 · Security Note