CVE-2018-10702

CVE-2018-10702 is a command injection vulnerability affecting Moxa AWK-3121 devices running firmware version 1.14. An unauthenticated attacker can exploit the "iw_filename" POST parameter to execute arbitrary commands on the device, leveraging functionality intended for administrative troubleshooting. This vulnerability carries a CVSS score of 8.8 (High), indicating a critical risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the high FAUCET Risk Score of 73/100 suggests a notable potential for future exploitation.