CVE-2019-5153

CVE-2019-5153 is a remote code execution vulnerability affecting Moxa AWK-3131A firmware version 1.13, stemming from an error message buffer overflow in the iw_webs configuration parsing functionality. An authenticated low-privilege attacker can exploit this by crafting a malicious username entry. With a CVSS score of 8.8 (High), this vulnerability allows for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.