CRITICAL🇵🇱 Wersja polska

CVE-2018-10698

CVSS 9.8v3.1pub. 2019-06-07upd. 2024-11-21

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Moxa Awk 3121

    HW
    Moxa
    wszystkie wersje
  • Moxa Awk 3121 Firmware

    OS
    Moxa
    1.14
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-10691HIGH7.5ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /syst...

CVE-2018-10690HIGH8.1ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providin...

CVE-2018-10693HIGH8.8ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator...

CVE-2018-10694HIGH8.1ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and...

CVE-2018-10695HIGH8.8ten sam produkt

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrato...