VYPR
Unrated severityNVD Advisory· Published Feb 25, 2020· Updated Aug 4, 2024

CVE-2019-5143

CVE-2019-5143

Description

An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Moxa/AWK-3131A firmwaredescription
  • Moxa/AWK-3131Allm-fuzzy
    Range: =1.13

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.