CVE-2019-5143

CVE-2019-5143 is a format string vulnerability in the Moxa AWK-3131A firmware (version 1.13) that allows for remote code execution. By crafting a malicious time server entry, an authenticated low-privilege attacker can overflow a buffer and execute arbitrary code. This vulnerability has a high CVSS score of 8.8, indicating a severe impact with high confidentiality, integrity, and availability compromise, and can be exploited remotely with low attack complexity. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the potential for remote code execution by a low-privileged user makes it a significant risk.