awk-3131a Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/awk-3131a/ Sun, 26 Feb 2023 06:33:34 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png awk-3131a Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/awk-3131a/ 32 32 CVE-2019-5148 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5148/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5148/ An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packet while unauthenticated to trigger this vulnerability.

The post CVE-2019-5148 appeared first on CVE Vulnerability.

]]> An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packet while unauthenticated to trigger this vulnerability.

The post CVE-2019-5148 appeared first on CVE Vulnerability.

]]> CVE-2019-5153 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5153/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5153/ An exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this […]

The post CVE-2019-5153 appeared first on CVE Vulnerability.

]]> An exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

The post CVE-2019-5153 appeared first on CVE Vulnerability.

]]> CVE-2019-5162 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5162/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5162/ An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as […]

The post CVE-2019-5162 appeared first on CVE Vulnerability.

]]> An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

The post CVE-2019-5162 appeared first on CVE Vulnerability.

]]> CVE-2019-5165 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5165/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5165/ An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13. A specially configured device hostname can cause the device to interpret select remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.

The post CVE-2019-5165 appeared first on CVE Vulnerability.

]]> An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13. A specially configured device hostname can cause the device to interpret select remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.

The post CVE-2019-5165 appeared first on CVE Vulnerability.

]]>