CVE-2018-10696 - CVE House
Back to Database
Status published High CVE-2018-10696

An issue was discovered on Moxa AWK-3121 1.14 devices. The...

Vulnerability Description

An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected against CSRF attacks, which allows an attacker to trick an administrator into executing actions without his/her knowledge, as demonstrated by the forms/iw_webSetParameters and forms/webSetMainRestart URIs.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-10696

Credits & Attribution

No credits recorded in the NVD database.

References

More from moxa

View All →
CVE-2022-27048
A vulnerability has been discovered in Moxa MGate which allows...
High 7.4
CVE-2021-46560
The firmware on Moxa TN-5900 devices through 3.1 allows command...
Critical 9.8
CVE-2021-46559
The firmware on Moxa TN-5900 devices through 3.1 has a...
High 7.5
CVE-2021-46082
Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol...
High 7.5
CVE-2021-39279
Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This...
High 8.8

Affected Vendor

Affected Software

awk-3121 firmware
Vulnerable Versions:
1.14

Timeline

Official Publish: June 7th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.