PT-2020-1754 · Moxa · Moxa Awk-3131A

Published 2020-02-25 · Updated 2022-06-13 · CVE-2019-5143

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa AWK-3131A firmware version 1.13

Description A format string vulnerability exists in the iw console conio writestr functionality, allowing for an overflow of the time server buffer when a specially crafted time server entry is used. This can result in remote code execution. An attacker, authenticated as a low-privilege user, can send commands to trigger this issue.

Recommendations For Moxa AWK-3131A firmware version 1.13, consider disabling the conio writestr function in iw console as a temporary workaround until a patch is available. Restrict access to the time server configuration to minimize the risk of exploitation. Avoid using specially crafted time server entries in the affected firmware version until the issue is resolved.

Exploit

Fix

Use of Externally-Controlled Format String

Buffer Overflow

Weakness Enumeration

CWE-134

CWE-120

Related Identifiers

BDU:2020-00994

CVE-2019-5143

Affected Products

Moxa Awk-3131A

References · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0932 · Exploit
• https://osv.dev/vulnerability/CVE-2019-5143 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00994 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-5143 · Security Note
• https://moxa.ru/novosti/tidings/prod/ustranenie-uyazvimostej-tochek-dostupa-moxa-awk-3131a · Note
• https://t.me/cvenotify/31542 · Telegram Post
• https://t.me/cvenotify/1209 · Telegram Post
• https://moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities · Note