What is CVE-2019-5142?

CVE-2019-5142 is a high-severity vulnerability in Moxa Awk-3131a, classified under OS Command Injection. CVSS score: 7.2/10. Published 2020-02-25.

How severe is CVE-2019-5142?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Moxa Awk-3131a

CVE-2019-5142

An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various authenticated requests to trigger this vulnerability.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Moxa Awk-3131a
Moxa Awk-3131a_firmware — versions 1.13
N/a Moxa — versions Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client version 1.13

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

talos-cna@cisco.com (Technical Description, Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-5142?: CVE-2019-5142 is a high-severity vulnerability in Moxa Awk-3131a, classified under OS Command Injection. CVSS score: 7.2/10. Published 2020-02-25.
How severe is CVE-2019-5142?: High severity. CVSS v3 base score is 7.2 out of 10.