Skip to content
OpenAdvisories
High · 8.8 CVE-2019-5136 EUVD-2019-14741GHSA-2843-q9jg-f7rg

An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware version 1.13. A spe…

Published Feb 25, 2020 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Moxa Moxa AWK-3131A Firmware version 1.13 —

Advisories 1

References