CVE-2019-5137

PoC —

CVSS 3.1

7.5 high

EPSS

2%p82

Published

Feb 25, 2020 (Feb 25, 2020)

Modified

Jun 17, 2026

Description

The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to the Moxa AWK-3131A firmware version 1.13.

Vendors: moxa
Products: awk-3131a firmware
Weakness: CWE-321, CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news1 stories

Vulnerability Spotlight: Multiple vulnerabilities in Moxa AWK

Cisco TalosFeb 24, 15:04 UTC · Feb 24, 2020Vulnerability in the wildCVE-2019-5136 CVE-2019-5137 CVE-2019-5138+9 CVEs