https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:21:07.892368+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-598 certfr-2019-avi-598 — De multiples vulnérabilités ont été découvertes dans Moxa AWK-3121. Certaines d'entre elles permettent à un attaquant d… 2026-10-08T19:21:07.898230+00:00 certfr-2019-avi-598 https://cve.radiocsirt.org/vuln/cnvd-2019-23548 cnvd-2019-23548 2026-10-08T19:21:07.898270+00:00 cnvd-2019-23548 https://cve.radiocsirt.org/vuln/euvd-2026-64766 EUVD-2026-64766 2026-10-08T19:21:07.898285+00:00 EUVD-2026-64766 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10690 fkie_cve-2018-10690 2026-10-08T19:21:07.898298+00:00

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an attacker to sniff the traffic easily and allows an attacker to compromise sensitive data such as credentials.

 https://cve.radiocsirt.org/vuln/ghsa-rr42-2w3r-mq8c GHSA-rr42-2w3r-mq8c 2026-10-08T19:21:07.898326+00:00

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an attacker to sniff the traffic easily and allows an attacker to compromise sensitive data such as credentials.

 https://cve.radiocsirt.org/vuln/gsd-2018-10690 gsd-2018-10690 2026-10-08T19:21:07.898341+00:00 gsd-2018-10690 https://cve.radiocsirt.org/vuln/icsa-19-337-02 ICSA-19-337-02 — Moxa AWK-3121 2026-10-08T19:21:07.898351+00:00

The device uses HTTP traffic by default allowing insecure communication to the web server, which could allow an attacker to compromise sensitive data such as credentials.CVE-2018-10690 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). An attacker can navigate to a URL and download the system log without authentication, which may allow access to sensitive information.CVE-2018-10691 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A cross-site scripting attack allows access to session cookies, which may allow an attacker to login into the device.CVE-2018-10692 has been assigned to this vulnerability. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). An unauthorized user may execute network troubleshooting commands to cause a buffer overflow condition, which may allow the attacker to execute commands on the device.CVE-2018-10693 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The Wi-Fi connection used to set up the device is not encrypted by default, which may allow an attacker to capture sensitive data.CVE-2018-10694 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculat…