What is the severity of CVE-2018-10693?

CVE-2018-10693 is classified as a critical vulnerability due to its ability to allow remote command execution.

How do I fix CVE-2018-10693?

To mitigate CVE-2018-10693, it is recommended to upgrade to a patched version of the Moxa AWK-3121 firmware that addresses this vulnerability.

What devices are affected by CVE-2018-10693?

CVE-2018-10693 specifically affects Moxa AWK-3121 devices running firmware version 1.14.

Can CVE-2018-10693 lead to data breaches?

Yes, CVE-2018-10693 could potentially lead to unauthorized access and data breaches as attackers can execute commands on the affected device.

What is the nature of the vulnerability in CVE-2018-10693?

CVE-2018-10693 is a command execution vulnerability that can be exploited through improperly secured ping functionality on the device.

Vulnerability/
CVE-2018-10693

high

8.8

CWE

119

7/6/2019

5/8/2024

CVE-2018-10693: Buffer Overflow

First published: Fri Jun 07 2019(Updated: )

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is susceptible to a buffer overflow. By crafting a packet that contains a string of 516 characters, it is possible for an attacker to execute the attack.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Moxa Awk-3121 Firmware	=1.14
Moxa AWK-3121

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2018-10693?
CVE-2018-10693 is classified as a critical vulnerability due to its ability to allow remote command execution.
How do I fix CVE-2018-10693?
To mitigate CVE-2018-10693, it is recommended to upgrade to a patched version of the Moxa AWK-3121 firmware that addresses this vulnerability.
What devices are affected by CVE-2018-10693?
CVE-2018-10693 specifically affects Moxa AWK-3121 devices running firmware version 1.14.
Can CVE-2018-10693 lead to data breaches?
Yes, CVE-2018-10693 could potentially lead to unauthorized access and data breaches as attackers can execute commands on the affected device.
What is the nature of the vulnerability in CVE-2018-10693?
CVE-2018-10693 is a command execution vulnerability that can be exploited through improperly secured ping functionality on the device.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/weakness
agent/severity
agent/references
agent/tags
agent/first-publish-date
agent/event
agent/description
agent/source
vendor/moxa
canonical/moxa awk-3121 firmware
version/moxa awk-3121 firmware/1.14
canonical/moxa awk-3121

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.