CVE-2018-10696: CSRF

First published: Fri Jun 07 2019(Updated: )

An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected against CSRF attacks, which allows an attacker to trick an administrator into executing actions without his/her knowledge, as demonstrated by the forms/iw_webSetParameters and forms/webSetMainRestart URIs.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/author
• agent/weakness
• agent/severity
• agent/references
• agent/tags
• agent/first-publish-date
• agent/event
• agent/description
• agent/source
• vendor/moxa
• canonical/moxa awk-3121 firmware
• version/moxa awk-3121 firmware/1.14
• canonical/moxa awk-3121