CVE-2019-5139: High severity moxa awk-3131a firmware vulnerability

Published Feb 25, 2020

Updated

An exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities of the Moxa AWK-3131A firmware version 1.13. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts.

Affected Software

2 affected components

MOXA AWK-3131A firmware=1.13

MOXA AWK-3131A

Event History

Feb 25, 2020

CVE Published

via MITRE·03:58 PM

Data Sourced

via MITRE·03:58 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-5139?

CVE-2019-5139 is a vulnerability that exists in multiple iw_* utilities of the Moxa AWK-3131A firmware version 1.13, allowing for the creation of custom diagnostic scripts using hard-coded credentials.

What is the severity of CVE-2019-5139?

CVE-2019-5139 has a severity rating of high with a CVSS score of 7.1.

How does CVE-2019-5139 affect Moxa AWK-3131A firmware?

CVE-2019-5139 affects Moxa AWK-3131A firmware version 1.13 and allows attackers to exploit hard-coded credentials to create custom diagnostic scripts.

Is Moxa AWK-3131A firmware version 1.13 vulnerable?

Yes, Moxa AWK-3131A firmware version 1.13 is vulnerable to the CVE-2019-5139 vulnerability.

How can I fix the CVE-2019-5139 vulnerability?

To fix the CVE-2019-5139 vulnerability, it is recommended to update the Moxa AWK-3131A firmware to a version that addresses the issue.