PT-2020-1757 · Moxa · Moxa Awk-3131A

Published 2020-02-25 · Updated 2022-06-13 · CVE-2019-5162

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moxa AWK-3131A firmware version 1.13

Description An exploitable improper access control issue exists in the iw webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this issue.

Recommendations For Moxa AWK-3131A firmware version 1.13, consider disabling the iw webs account settings functionality until a patch is available to prevent exploitation. Restrict access to the device to minimize the risk of remote shell access. Avoid using specially crafted user name entries in the account settings to prevent overwriting existing user account passwords.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2020-00997

CVE-2019-5162

Affected Products

Moxa Awk-3131A

References · 7

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0955 · Exploit
• https://osv.dev/vulnerability/CVE-2019-5162 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5162 · Security Note
• https://bdu.fstec.ru/vul/2020-00997 · Security Note
• https://moxa.ru/novosti/tidings/prod/ustranenie-uyazvimostej-tochek-dostupa-moxa-awk-3131a · Note
• https://moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities · Note
• https://t.me/cvenotify/1212 · Telegram Post