CVE-2016-8363 An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RT...
CriticalCVSS 10.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Moxa oncellg3470a-lte firmware | <= 10-31-2016 | No fix listed |
| Moxa awk-4131a firmware | <= 10-31-2016 | No fix listed |
| Moxa awk-3191 firmware | <= 05-30-2017 | No fix listed |
| Moxa awk-5232 firmware | <= 05-30-2017 | No fix listed |
| Moxa awk-6232 firmware | <= 05-30-2017 | No fix listed |
| Moxa awk-1121 firmware | <= 06-29-2017 | No fix listed |
| Moxa awk-1127 firmware | <= 06-29-2017 | No fix listed |
| Moxa wac-1001 v2 firmware | <= 06-29-2017 | No fix listed |
| Moxa wac-2004 firmware | <= 06-29-2017 | No fix listed |
| Moxa awk-3121-m12-rtg firmware | <= 06-29-2017 | No fix listed |
| Moxa awk-3131-m12-rcc firmware | <= 06-29-2017 | No fix listed |
| Moxa awk-5232-m12-rcc firmware | <= 06-29-2017 | No fix listed |
| Moxa awk-3131a firmware | <= 10-31-2016 | No fix listed |
| Moxa awk-1131a firmware | <= 10-31-2016 | No fix listed |
References
- 94092 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource