CVE-2016-8723: Null Pointer Dereference

Published Apr 13, 2017

Updated

An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Any HTTP GET request not preceded by an '/' will cause a segmentation fault in the web server. An attacker can send any of a multitude of potentially unexpected HTTP get requests to trigger this vulnerability.

Affected Software

2 affected components

MOXA AWK-3131A firmware=1.1

MOXA AWK-3131A

Event History

Apr 13, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2016-8723?

CVE-2016-8723 is classified as a high severity vulnerability due to the potential for remote exploitation leading to a denial of service.

How do I fix CVE-2016-8723?

To mitigate CVE-2016-8723, update the Moxa AWK-3131A firmware to a version newer than 1.1 that addresses this vulnerability.

What attack vector is used in CVE-2016-8723?

CVE-2016-8723 can be exploited through HTTP GET requests that are not correctly formatted with a preceding '/'.

What devices are affected by CVE-2016-8723?

CVE-2016-8723 affects devices running Moxa AWK-3131A firmware version 1.1.

What are the potential impacts of exploiting CVE-2016-8723?

Exploiting CVE-2016-8723 can lead to a segmentation fault in the web server, causing it to crash and become unavailable.