HIGH🇬🇧 English

CVE-2018-10690

CVSS 8.1v3.1pub. 2019-06-07upd. 2024-11-21

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an attacker to sniff the traffic easily and allows an attacker to compromise sensitive data such as credentials.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Moxa Awk 3121

    HW
    Moxa
    wszystkie wersje
  • Moxa Awk 3121 Firmware

    OS
    Moxa
    1.14
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2018-10698CRITICAL9.8ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by def...

CVE-2018-10693HIGH8.8ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator...

CVE-2018-10694HIGH8.1ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and...

CVE-2018-10695HIGH8.8ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrato...

CVE-2018-10691HIGH7.5ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /syst...

CVE-2018-10690 — HIGH 8.1 | CVEbaza.pl