RCE in Moxa Awk-3131a

CVE-2017-14459

An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client in firmware versions 1.4 to 1.7 (current). An attacker c…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.122 (95.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

  • Moxa Awk-3131a
  • Moxa Awk-3131a_firmware — versions 1.4, 1.5, 1.6
  • Talos Moxa — versions Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client versions 1.4 - 1.9. In addition, versions prior to 1.4 appear similarly vulnerable to injection, but not as easily exploitable (described below). Other models in the AWK product line may likewise be vulnerable but have not been tested.

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2017-14459?
CVE-2017-14459 is a critical-severity vulnerability in Moxa Awk-3131a, classified under OS Command Injection. CVSS score: 10.0/10. Published 2018-04-11.
How severe is CVE-2017-14459?
Critical severity. CVSS v3 base score is 10.0 out of 10.