CVE-2018-10703: Buffer Overflow
First published: Fri Jun 07 2019(Updated: )
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_serverip" is susceptible to buffer overflow. By crafting a packet that contains a string of 480 characters, it is possible for an attacker to execute the attack.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moxa AWK-3121 Firmware | =1.14 | |
| Moxa Awk-3121 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-10703?
CVE-2018-10703 is classified as a high severity vulnerability due to its ability to allow remote code execution on affected devices.
How do I fix CVE-2018-10703?
To fix CVE-2018-10703, ensure your Moxa AWK-3121 devices are updated to the latest firmware version that addresses this vulnerability.
What devices are affected by CVE-2018-10703?
CVE-2018-10703 affects Moxa AWK-3121 devices running firmware version 1.14.
What type of attack can exploit CVE-2018-10703?
CVE-2018-10703 can be exploited by attackers to execute arbitrary commands on the device, leading to potential unauthorized access.
Is there a known exploit for CVE-2018-10703?
Yes, there are known exploits that take advantage of the command execution capabilities provided by the vulnerability in CVE-2018-10703.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/references
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/moxa
- canonical/moxa awk-3121 firmware
- version/moxa awk-3121 firmware/1.14