CVE-2018-10693: Buffer Overflow

Published Jun 7, 2019

Updated

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is susceptible to a buffer overflow. By crafting a packet that contains a string of 516 characters, it is possible for an attacker to execute the attack.

Affected Software

2 affected components

MOXA Awk-3121 Firmware=1.14

MOXA AWK-3121

Event History

Jun 7, 2019

CVE Published

via MITRE·07:22 PM

Data Sourced

via MITRE·07:22 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-10693?

CVE-2018-10693 is classified as a critical vulnerability due to its ability to allow remote command execution.

How do I fix CVE-2018-10693?

To mitigate CVE-2018-10693, it is recommended to upgrade to a patched version of the Moxa AWK-3121 firmware that addresses this vulnerability.

What devices are affected by CVE-2018-10693?

CVE-2018-10693 specifically affects Moxa AWK-3121 devices running firmware version 1.14.

Can CVE-2018-10693 lead to data breaches?

Yes, CVE-2018-10693 could potentially lead to unauthorized access and data breaches as attackers can execute commands on the affected device.

What is the nature of the vulnerability in CVE-2018-10693?

CVE-2018-10693 is a command execution vulnerability that can be exploited through improperly secured ping functionality on the device.