CVE-2016-8723 in AWK-3131A
Summary
An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Any HTTP GET request not preceded by an '/' will cause a segmentation fault in the web server. An attacker can send any of a multitude of potentially unexpected HTTP get requests to trigger this vulnerability.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Responsible
Talos
Reservation
10/17/2016
Disclosure
04/13/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 99834 | Moxa AWK-3131A Web Application null pointer dereference | 476 | Not defined | Not defined | CVE-2016-8723 |