Vulnerability Spotlight: Multiple vulnerabilities in Moxa AWK-3131A
Summary: Cisco Talos researchers Jared Rittle and Carl Hurd found multiple vulnerabilities in the Moxa AWK-3131A industrial wireless networking device, firmware version 1.13, including remote code execution, privilege escalation, command injection, hard-coded cryptographic keys and credentials, an authentication bypass, and a denial-of-service flaw. Talos worked with Moxa under its coordinated disclosure policy to resolve the issues and make an update available, and published Snort rules 52010-52018, 52024, 52025, 52086 and 52241.
Bottom line: Several of these flaws, including the ServiceAgent denial-of-service, can be triggered by an unauthenticated attacker, and the hard-coded key lets captured traffic to or from the device be decrypted - on equipment deployed to carry communications across industrial environments.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-5137CVE-2019-5138CVE-2019-5139CVE-2019-5140CVE-2019-5141CVE-2019-5142
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026