CVE-2018-10700

An issue was discovered on Moxa AWK-3121 1.19 devices

published June 7, 2019

CVSS
—
EPSS
38%
Percentile
98.6
In the wild
Unconfirmed
What it is

An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows an attacker to execute XSS by injecting an XSS payload. The POST parameter "iw_board_deviceName" is susceptible to this injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.38324 · 98.6th percentile
Published
2019-06-07T19:51Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 38% → 23%
    epss
  • 06 SEP 03:11Z
    EPSS moved 38% → 23%
    epss
  • 30 AUG 16:00Z
    EPSS moved 23% → 38%
    epss
  • 29 AUG 04:30Z
    EPSS moved 38% → 23%
    epss
  • 07 JUN 19:51Z
    An issue was discovered on Moxa AWK-3121 1.19 devices
    cvelistv5