CVE-2018-10703

An issue was discovered on Moxa AWK-3121 1.14 devices

published June 7, 2019

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_serverip" is susceptible to buffer overflow. By crafting a packet that contains a string of 480 characters, it is possible for an attacker to execute the attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02605 · 85.3th percentile
Published
2019-06-07T19:56Z
EPSS history
Timeline
  • 07 JUN 19:56Z
    An issue was discovered on Moxa AWK-3121 1.14 devices
    cvelistv5