CVE-2019-5148

published 2020-02-25

CVE-2019-5148: An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packet while unauthenticated to trigger this vulnerability.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
moxa	awk-3131a_firmware	—	—

CWE-125 CWE-191