Vulnerability Spotlight: Moxa AWK-3131A Multiple Features Login Username Parameter OS Command Injection Vulnerability
Summary: Cisco Talos disclosed TALOS-2017-0507 (CVE-2017-14459), an OS command injection in the Moxa AWK-3131A industrial wireless access point in firmware versions 1.4 and newer, where an attacker can inject commands through the username parameter to gain remote, unauthenticated, root-level execution. Exploitation was confirmed via Telnet, SSH, and the local console port, and the web application is suspected to be vulnerable as well; Moxa has released updated firmware.
Key Takeaway: This is an unauthenticated root-level flaw in an access point built for industrial environments such as automated materials handling and guided vehicles, so the device itself can serve as a pathway into an ICS network where failures can affect physical safety and the environment.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2017-14459
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026