CVE-2018-10702

An issue was discovered on Moxa AWK-3121 1.14 devices

published June 7, 2019

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_filename" is susceptible to command injection via shell metacharacters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05395 · 92.7th percentile
Published
2019-06-07T19:55Z
EPSS history
Timeline
  • 07 JUN 19:55Z
    An issue was discovered on Moxa AWK-3121 1.14 devices
    cvelistv5