CVE-2018-10698 - CVE House
Back to Database
Status published Critical CVE-2018-10698

An issue was discovered on Moxa AWK-3121 1.14 devices. The...

Vulnerability Description

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-10698

Credits & Attribution

No credits recorded in the NVD database.

References

More from moxa

View All →
CVE-2022-27048
A vulnerability has been discovered in Moxa MGate which allows...
High 7.4
CVE-2021-46560
The firmware on Moxa TN-5900 devices through 3.1 allows command...
Critical 9.8
CVE-2021-46559
The firmware on Moxa TN-5900 devices through 3.1 has a...
High 7.5
CVE-2021-46082
Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol...
High 7.5
CVE-2021-39279
Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This...
High 8.8

Affected Vendor

Affected Software

awk-3121 firmware
Vulnerable Versions:
1.14

Timeline

Official Publish: June 7th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.