Moxa AWK-3121 1.14 srvName memory corruption

Summaryinfo

A vulnerability, which was classified as critical, has been found in Moxa AWK-3121 1.14. Impacted is an unknown function. This manipulation of the argument srvName as part of POST Parameter causes memory corruption. This vulnerability is tracked as CVE-2018-10693. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability classified as critical was found in Moxa AWK-3121 1.14 (Router Operating System). Affected by this vulnerability is an unknown functionality. The manipulation of the argument srvName as part of a POST Parameter leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is susceptible to a buffer overflow. By crafting a packet that contains a string of 516 characters, it is possible for an attacker to execute the attack.

The weakness was disclosed 06/07/2019 (Website). It is possible to read the advisory at seclists.org. This vulnerability is known as CVE-2018-10693 since 05/03/2018. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-136204, VDB-136205, VDB-136206 and VDB-136208 are pretty similar. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Moxa

Name

• AWK-3121

Version

• 1.14

License

• commercial

Website

• Vendor: https://www.moxa.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion