Moxa AWK-3121 1.14 iw_filename command injection

Summaryinfo

A vulnerability labeled as critical has been found in Moxa AWK-3121 1.14. This vulnerability affects unknown code. Executing a manipulation of the argument iw_filename as part of Shell Metacharacter can lead to command injection. This vulnerability is handled as CVE-2018-10702. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability classified as critical was found in Moxa AWK-3121 1.14 (Router Operating System). This vulnerability affects an unknown part. The manipulation of the argument iw_filename as part of a Shell Metacharacter leads to a command injection vulnerability. The CWE definition for the vulnerability is CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_filename" is susceptible to command injection via shell metacharacters.

The weakness was released 06/07/2019 (Website). The advisory is shared for download at seclists.org. This vulnerability was named CVE-2018-10702 since 05/03/2018. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1202.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Entries connected to this vulnerability are available at VDB-136204, VDB-136205, VDB-136206 and VDB-136207. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Router Operating System

Vendor

• Moxa

Name

• AWK-3121

Version

• 1.14

License

• commercial

Website

• Vendor: https://www.moxa.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion