AF
Product
Awk-3131a Firmware
28
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 17Medium 6Low 0
Watch
Add Awk-3131a Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8363 | 10.0 | Feb 13 | An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004… Affected: through 10-31-2016 |
| CVE-2019-5138 | 9.9 | Feb 25 | An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13 Affected: 1.13 |
| CVE-2017-14459 | 9.8 | Apr 11 | An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless… Affected: 1.4; 1.5; 1.6; 1.7 |
| CVE-2016-8717 | 9.8 | Apr 2 | An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1 Affected: 1.1 |
| CVE-2016-8721 | 9.1 | Apr 20 | An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1 Affected: 1.1 |
| CVE-2019-5162 | 8.8 | Feb 25 | An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13 Affected: 1.13 |
| CVE-2019-5153 | 8.8 | Feb 25 | An exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality of the Moxa AWK-3131A firmware version 1.13 Affected: 1.13 |
| CVE-2019-5143 | 8.8 | Feb 25 | An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13 Affected: 1.13 |
| CVE-2019-5141 | 8.8 | Feb 25 | An exploitable command injection vulnerability exists in the iw_webs functionality of the Moxa AWK-3131A firmware version 1.13 Affected: 1.13 |
| CVE-2019-5140 | 8.8 | Feb 25 | An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13 Affected: 1.13 |
| CVE-2019-5136 | 8.8 | Feb 25 | An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware version 1.13 Affected: 1.13 |
| CVE-2016-8718 | 8.8 | Apr 12 | An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1 Affected: 1.1 |
| CVE-2016-8712 | 8.1 | Apr 13 | An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1 Affected: 1.1 |
| CVE-2019-5148 | 7.5 | Feb 25 | An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13 Affected: 1.13 |
| CVE-2019-5137 | 7.5 | Feb 25 | The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to the Moxa AWK-3131A firmware… Affected: 1.13 |
| CVE-2016-8727 | 7.5 | Apr 13 | An exploitable information disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point Affected: 1.1 |
| CVE-2016-8726 | 7.5 | Apr 13 | An exploitable null pointer dereference vulnerability exists in the Web Application /forms/web_runScript iw_filename functionality of Moxa AWK-3131A Wireless Access Point running… Affected: 1.1 |
| CVE-2016-8723 | 7.5 | Apr 13 | An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1 Affected: 1.1 |
| CVE-2016-8716 | 7.5 | Apr 12 | An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1 Affected: 1.1 |
| CVE-2019-5165 | 7.2 | Feb 25 | An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13 Affected: 1.13 |
| CVE-2019-5142 | 7.2 | Feb 25 | An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13 Affected: 1.13 |
| CVE-2019-5139 | 7.1 | Feb 25 | An exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of the Moxa AWK-3131A firmware version 1.13 Affected: 1.13 |
| CVE-2016-8362 | 6.5 | Feb 13 | An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004… Affected: through 10-31-2016 |
| CVE-2016-8719 | 6.1 | Apr 12 | An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1 Affected: 1.1 |
| CVE-2016-8725 | 5.3 | Apr 13 | An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A wireless access point running firmware 1.1 Affected: 1.1 |
| CVE-2016-8724 | 5.3 | Apr 13 | An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1 Affected: 1.1 |
| CVE-2016-8722 | 5.3 | Apr 13 | An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client Affected: 1.1 |
| CVE-2016-8720 | 4.3 | Apr 13 | An exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of the Moxa AWK-3131A Wireless Access Point running firmware 1.1 Affected: 1.1 |
Showing 28