CVE-2019-5141

CVE-2019-5141 is a high-severity command injection vulnerability affecting the iw_webs functionality of Moxa AWK-3131A firmware version 1.13. An authenticated low-privilege attacker can exploit a specially crafted iw_serverip parameter to inject commands into a subsequent iw_system call, gaining remote control over the device. With a CVSS score of 8.8, this vulnerability presents a high risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.