CVE-2019-5165CWE-288

An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13

High · published February 25, 2020

CVSS v3.0
8.0
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13. A specially configured device hostname can cause the device to interpret select remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
8.0 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02145 · 81.9th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2020-02-25T15:49Z
EPSS history
Timeline
  • 25 FEB 15:49Z
    An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13
    cvelistv5