CVE-2018-10693

Vulnerability

The Moxa AWK-3121 wireless access point running firmware version 1.14 provides a ping functionality to allow administrators to check network connectivity. The POST parameter srvName in the ping feature is vulnerable to a buffer overflow. Sending a string of 516 characters in this parameter overflows the buffer, leading to arbitrary code execution [1].

Exploitation

An attacker with network access to the device can send a crafted POST request to the ping endpoint with a srvName parameter of exactly 516 characters. No authentication is required to reach this functionality, as it is intended for administrative use but is exposed without proper access controls. The overflow overwrites memory, allowing the attacker to control execution flow [1].

Impact

Successful exploitation allows the attacker to execute arbitrary commands on the device with root privileges. This can lead to full compromise of the access point, including data exfiltration, further network pivoting, or disruption of network services [1].

Mitigation

As of the publication date, no official patch has been released by Moxa. Users should consider isolating AWK-3121 devices from untrusted networks or disabling the ping functionality if possible. The device may be end-of-life; consult Moxa support for guidance [1].