CVE-2018-10695: Buffer Overflow
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the device's network. However, the same functionality allows an attacker to execute commands on the device. The POST parameters "to1,to2,to3,to4" are all susceptible to buffer overflow. By crafting a packet that contains a string of 678 characters, it is possible for an attacker to execute the attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10695?
CVE-2018-10695 is considered to have a high severity due to its ability to allow attackers to execute commands on the Moxa AWK-3121 devices.
How do I fix CVE-2018-10695?
To fix CVE-2018-10695, it's recommended to update the Moxa AWK-3121 firmware to a version that addresses this vulnerability.
What devices are affected by CVE-2018-10695?
CVE-2018-10695 specifically affects Moxa AWK-3121 devices running firmware version 1.14.
What type of vulnerability is CVE-2018-10695?
CVE-2018-10695 is classified as a command execution vulnerability that can be exploited through the alert functionality of the device.
Can CVE-2018-10695 be exploited remotely?
Yes, CVE-2018-10695 can be exploited remotely if an attacker can send crafted POST requests to the affected Moxa AWK-3121 device.