Buffer Overflow Vulnerability in Moxa AWK-3121 Devices
CVE-2018-10693
8.8HIGH
Summary
A buffer overflow vulnerability exists in Moxa AWK-3121 devices running version 1.14. This issue allows an attacker to exploit the ping functionality, intended for administrators to perform ICMP checks, thus gaining the ability to execute arbitrary commands on the device. Specifically, the POST parameter 'srvName' can be manipulated with an oversized input of 516 characters, leading to potential unauthorized access and control over the device's operations.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved