CVE-2019-5165
Severity
7.2HIGH
EPSS
0.1%
top 65.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 25
Latest updateMay 24
Description
An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13. A specially configured device hostname can cause the device to interpret select remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-rv56-hq65-5hgg: An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1↗2022-05-24
CVEList▶
CVE-2019-5165: An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1↗2020-02-25