CVE-2016-8721 - CVE House
Back to Database
Status published Critical CVE-2016-8721

An exploitable OS Command Injection vulnerability exists in the web...

Vulnerability Description

An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1. Specially crafted web form input can cause an OS Command Injection resulting in complete compromise of the vulnerable device. An attacker can exploit this vulnerability remotely.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-8721

Credits & Attribution

No credits recorded in the NVD database.

References

More from Moxa

View All →
CVE-2025-9315
Unauthenticated Device Registration Vulnerability in MXsecurity Series
Medium 6.3
CVE-2025-6950
An Use of Hard-coded Credentials vulnerability has been identified in...
Critical 9.9
CVE-2025-6949
An Execution with Unnecessary Privileges vulnerability has been identified in...
Critical 9.3
CVE-2025-6894
An Execution with Unnecessary Privileges vulnerability has been identified in...
Medium 5.3
CVE-2025-6893
An Execution with Unnecessary Privileges vulnerability has been identified in...
Critical 9.3

Affected Vendor

Affected Software

Moxa AWK-3131A WAP
Vulnerable Versions:
1.1 Build 15122211

Timeline

Official Publish: April 20th, 2017
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.