cbcvebase.
CVE-2016-8363
published 2017-02-13

CVE-2016-8363: An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2…

critical10CVSS 3.0
AVNACLPRNUINSCCHIHAH
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server.

Affected

14 ranges
VendorProductVersion rangeFixed in
moxaawk-1121_firmware<= 06-29-2017
moxaawk-1127_firmware<= 06-29-2017
moxaawk-1131a_firmware<= 10-31-2016
moxaawk-3121-m12-rtg_firmware<= 06-29-2017
moxaawk-3131-m12-rcc_firmware<= 06-29-2017
moxaawk-3131a_firmware<= 10-31-2016
moxaawk-3191_firmware<= 05-30-2017
moxaawk-4131a_firmware<= 10-31-2016
moxaawk-5232-m12-rcc_firmware<= 06-29-2017
moxaawk-5232_firmware<= 05-30-2017
moxaawk-6232_firmware<= 05-30-2017
moxaoncellg3470a-lte_firmware<= 10-31-2016
moxawac-1001_v2_firmware<= 06-29-2017
moxawac-2004_firmware<= 06-29-2017