VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 25, 2020· Updated Aug 4, 2024

CVE-2019-5138

CVE-2019-5138

Description

An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file can cause arbitrary busybox commands to be executed, resulting in remote control over the device. An attacker can send diagnostic while authenticated as a low privilege user to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Moxa/AWK-3131A firmwaredescription
  • Moxa/AWK-3131Allm-fuzzy
    Range: =1.13

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.