CVE-2018-10700: XSS

Published Jun 7, 2019

Updated

An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows an attacker to execute XSS by injecting an XSS payload. The POST parameter "iwboarddeviceName" is susceptible to this injection.

Affected Software

2 affected components

MOXA Awk-3121 Firmware=1.19

MOXA AWK-3121

Event History

Jun 7, 2019

CVE Published

via MITRE·07:51 PM

Data Sourced

via MITRE·07:51 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-10700?

CVE-2018-10700 has a high severity due to its potential to allow XSS attacks.

How do I fix CVE-2018-10700?

To fix CVE-2018-10700, update the Moxa AWK-3121 to the latest firmware version that addresses this vulnerability.

What devices are affected by CVE-2018-10700?

CVE-2018-10700 affects Moxa AWK-3121 devices running firmware version 1.19.

What type of attack does CVE-2018-10700 facilitate?

CVE-2018-10700 facilitates cross-site scripting (XSS) attacks via an improperly sanitized POST parameter.

Who can exploit CVE-2018-10700?

An attacker with network access to the Moxa AWK-3121 device can exploit CVE-2018-10700.