CVE-2016-8718

published 2017-04-12

CVE-2016-8718: An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware…

high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authentic request.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
moxa	awk-3131a_firmware	—	—
moxa	awk-3131a_series_industrial_ieee_802.11a_b_g_n_wireless_ap_bridge_client	—	—

CWE-352