What is the severity of CVE-2018-10695?

CVE-2018-10695 is considered to have a high severity due to its ability to allow attackers to execute commands on the Moxa AWK-3121 devices.

How do I fix CVE-2018-10695?

To fix CVE-2018-10695, it's recommended to update the Moxa AWK-3121 firmware to a version that addresses this vulnerability.

What devices are affected by CVE-2018-10695?

CVE-2018-10695 specifically affects Moxa AWK-3121 devices running firmware version 1.14.

What type of vulnerability is CVE-2018-10695?

CVE-2018-10695 is classified as a command execution vulnerability that can be exploited through the alert functionality of the device.

Can CVE-2018-10695 be exploited remotely?

Yes, CVE-2018-10695 can be exploited remotely if an attacker can send crafted POST requests to the affected Moxa AWK-3121 device.

Vulnerability/
CVE-2018-10695

high

8.8

CWE

119

7/6/2019

5/8/2024

CVE-2018-10695: Buffer Overflow

First published: Fri Jun 07 2019(Updated: )

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the device's network. However, the same functionality allows an attacker to execute commands on the device. The POST parameters "to1,to2,to3,to4" are all susceptible to buffer overflow. By crafting a packet that contains a string of 678 characters, it is possible for an attacker to execute the attack.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Moxa Awk-3121 Firmware	=1.14
Moxa AWK-3121

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2018-10695?
CVE-2018-10695 is considered to have a high severity due to its ability to allow attackers to execute commands on the Moxa AWK-3121 devices.
How do I fix CVE-2018-10695?
To fix CVE-2018-10695, it's recommended to update the Moxa AWK-3121 firmware to a version that addresses this vulnerability.
What devices are affected by CVE-2018-10695?
CVE-2018-10695 specifically affects Moxa AWK-3121 devices running firmware version 1.14.
What type of vulnerability is CVE-2018-10695?
CVE-2018-10695 is classified as a command execution vulnerability that can be exploited through the alert functionality of the device.
Can CVE-2018-10695 be exploited remotely?
Yes, CVE-2018-10695 can be exploited remotely if an attacker can send crafted POST requests to the affected Moxa AWK-3121 device.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/weakness
agent/severity
agent/references
agent/tags
agent/first-publish-date
agent/event
agent/description
agent/source
vendor/moxa
canonical/moxa awk-3121 firmware
version/moxa awk-3121 firmware/1.14
canonical/moxa awk-3121

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.