CVE-2016-8726: Null Pointer Dereference

Published Apr 13, 2017

Updated

An exploitable null pointer dereference vulnerability exists in the Web Application /forms/webrunScript iwfilename functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. An HTTP POST request with a blank line in the header will cause a segmentation fault in the web server.

Affected Software

2 affected components

MOXA AWK-3131A firmware=1.1

MOXA AWK-3131A

Event History

Apr 13, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2016-8726?

CVE-2016-8726 has a severity rating that reflects a moderate risk due to potential exploitation leading to a segmentation fault.

How do I fix CVE-2016-8726?

To fix CVE-2016-8726, update the Moxa AWK-3131A Wireless Access Point to the latest firmware that addresses this vulnerability.

What are the symptoms of exploiting CVE-2016-8726?

Exploiting CVE-2016-8726 may result in a segmentation fault, leading to the web server crashing.

Which devices are affected by CVE-2016-8726?

The Moxa AWK-3131A Wireless Access Point running firmware version 1.1 is affected by CVE-2016-8726.

Is remote exploitation possible with CVE-2016-8726?

Yes, remote exploitation of CVE-2016-8726 is possible through crafted HTTP POST requests.