60
CVE-2019-5139
PoC —CVSS 3.1
7.1 high
EPSS
<1%p25
Published
()
Modified
Description
An exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of the Moxa AWK-3131A firmware version 1.13. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts.
- Vendors
- moxa
- Products
- awk-3131a firmware
- Weakness
- CWE-798
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N