CRITICAL🇬🇧 English

CVE-2018-10698

CVSS 9.8v3.1pub. 2019-06-07upd. 2024-11-21

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Moxa Awk 3121

    HW
    Moxa
    wszystkie wersje
  • Moxa Awk 3121 Firmware

    OS
    Moxa
    1.14
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2018-10691HIGH7.5ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /syst...

CVE-2018-10690HIGH8.1ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providin...

CVE-2018-10693HIGH8.8ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator...

CVE-2018-10694HIGH8.1ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and...

CVE-2018-10695HIGH8.8ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrato...

CVE-2018-10698 — CRITICAL 9.8 | CVEbaza.pl