Awk 3131a Firmware

Vendor:

First CVE: Feb 13, 2017 · Active for 9 years

28
Total CVEs
More Total CVEs than 97% of tracked products
9.3
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 66% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Awk 3131a Firmware over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 13, 2017
9 years ago
Most Recent CVE
Feb 25, 2020
2,345 days ago

CVE Severity & Scoring

Awk 3131a Firmware28 CVEs
All CVEs353,240 CVEs
MediumHighCritical
Attack Vector
Local1 (3.6%)
Network26 (92.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (3.6%)
Attack Complexity
Low26 (92.9%)
High2 (7.1%)
Unknown0 (0.0%)
User Interaction
None25 (89.3%)
Unknown0 (0.0%)
Required3 (10.7%)
Privileges Required
Low9 (32.1%)
High3 (10.7%)
None16 (57.1%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (28 CVEs).

28 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/clie
Apr 11, 20189.848NOYES
An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic scrip
Feb 25, 20209.934NONO
An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocume
Apr 2, 20189.831NONO
An exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user n
Feb 25, 20208.830NONO
An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name
Feb 25, 20208.829NONO
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Ser
Feb 13, 201710.029NONO
An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted time server entry
Feb 25, 20208.828NONO
An exploitable command injection vulnerability exists in the iw_webs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted iw_serverip parameter can cause
Feb 25, 20208.828NONO
An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file name can c
Feb 25, 20208.827NONO
An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can
Feb 25, 20208.827NONO

Exploit Exposure

Signals from CVEs in this product scope (28 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
3.6% of CVEs· 85th percentile

Social Chatter

Signals from CVEs in this product scope (28 CVEs).

Media Mentions

Signals from CVEs in this product scope (28 CVEs).

Top CNAs Publishing CVEs For Awk 3131a Firmware

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
1.719.812.2%01
1.619.812.2%01
1.519.812.2%01
1.419.812.2%01
1.13128.33.5%00
1.1137.12.0%00