Skip to content
OpenAdvisories
Critical ICSA-19-337-02 14 CVEs

Moxa AWK-3121

Published Dec 3, 2019 · Updated Dec 3, 2019

Vendor: Moxa Product: AWK-3121

Summary

Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information, cause availability issues, and execute remote code.

Vulnerabilities 14

  • Unscored —
    CVE-2018-10690

    An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an inse…

  • Unscored —
    CVE-2018-10691

    An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log…

  • Unscored —
    CVE-2018-10692

    An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag.…

  • Unscored —
    CVE-2018-10693

    An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can exec…

  • Unscored —
    CVE-2018-10694

    An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not…

  • Unscored —
    CVE-2018-10695

    An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can sen…

  • Unscored —
    CVE-2018-10696

    An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to…

  • Unscored —
    CVE-2018-10697

    An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an adminis…

  • Unscored —
    CVE-2018-10698

    An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. Thi…

  • Unscored —
    CVE-2018-10699

    An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that…

  • Unscored —
    CVE-2018-10700 EPSS 38%

    An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change th…

  • Unscored —
    CVE-2018-10701

    An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scrip…

  • Unscored —
    CVE-2018-10702

    An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scrip…

  • Unscored —
    CVE-2018-10703

    An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scrip…

Revision history

  1. #1

    ICSA-19-337-02 Moxa AWK-3121

References