CVE-2016-8722: Infoleak

Published Apr 13, 2017

Updated

An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client. Retrieving a specific URL without authentication can reveal sensitive information to an attacker.

Affected Software

2 affected components

MOXA AWK-3131A firmware=1.1

MOXA AWK-3131A

Event History

Apr 13, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2016-8722?

CVE-2016-8722 is categorized as an information disclosure vulnerability with a moderate severity level.

How do I fix CVE-2016-8722?

To remediate CVE-2016-8722, upgrade the Moxa AWK-3131A firmware to the latest version available from the manufacturer.

What information can be exposed due to CVE-2016-8722?

CVE-2016-8722 can potentially expose sensitive information by accessing specific URLs without authentication.

Is CVE-2016-8722 applicable to all Moxa AWK-3131A devices?

CVE-2016-8722 specifically affects the Moxa AWK-3131A firmware version 1.1.

How can attackers exploit CVE-2016-8722?

Attackers can exploit CVE-2016-8722 by sending requests to specific URLs to retrieve sensitive information without authentication.