ByteOS Network

NVD Vulnerability Details :

CVE-2018-10698

Analyzed

Source-cve@mitre.org

Published At-07 Jun, 2019 | 20:29

Updated At-28 Feb, 2023 | 19:29

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Moxa Inc.

>>awk-3121_firmware>>1.14

cpe:2.3:o:moxa:awk-3121_firmware:1.14:*:*:*:*:*:*:*

Moxa Inc.

>>awk-3121>>-

cpe:2.3:h:moxa:awk-3121:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-311	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html	cve@mitre.org	Exploit Third Party Advisory VDB Entry
https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121	cve@mitre.org	Third Party Advisory
https://seclists.org/bugtraq/2019/Jun/8	cve@mitre.org	Mailing List Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History