PT-2019-8764 · Moxa · Moxa Awk-3121

Samuel Huntley · Published 2019-06-07 · Updated 2023-02-28 · CVE-2018-10697

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa AWK-3121 version 1.14

Description An issue was discovered in the Moxa AWK-3121 device, where the ping functionality, intended for administrators to check network connectivity via ICMP calls, can be exploited by an attacker to execute commands on the device. The srvName parameter in a POST request is susceptible to injection. By crafting a packet with shell metacharacters, an attacker can execute this attack.

Recommendations For Moxa AWK-3121 version 1.14, consider disabling the ping functionality or restricting access to the srvName parameter in the POST request to minimize the risk of exploitation. Avoid using the srvName parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-10697

Affected Products

Moxa Awk-3121

References · 6

• 🔥 https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 · Exploit
• 🔥 http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-10697 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10697 · Security Note
• https://seclists.org/bugtraq/2019/Jun/8 · Note
• https://t.me/cibsecurity/4785 · Telegram Post