CVE-2019-5142

Katalog CVE

CVSS 7.2 · High EPSS 6,6%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada moxa awk-3131a firmware. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various authenticated requests to trigger this vulnerability.

Rincian

Terbit di NVD

25 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

6,6% peluang dieksploitasi; lebih tinggi dari 93,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0931 exploit · deskripsi teknis · advisory pihak ketiga