https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T17:18:38.439451+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-598 certfr-2019-avi-598 — De multiples vulnérabilités ont été découvertes dans Moxa AWK-3121. Certaines d'entre elles permettent à un attaquant d… 2026-10-08T17:18:38.443703+00:00 certfr-2019-avi-598 https://cve.radiocsirt.org/vuln/cnvd-2019-17003 cnvd-2019-17003 2026-10-08T17:18:38.443740+00:00 cnvd-2019-17003 https://cve.radiocsirt.org/vuln/euvd-2026-64758 EUVD-2026-64758 2026-10-08T17:18:38.443755+00:00 EUVD-2026-64758 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10696 fkie_cve-2018-10696 2026-10-08T17:18:38.443768+00:00

An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected against CSRF attacks, which allows an attacker to trick an administrator into executing actions without his/her knowledge, as demonstrated by the forms/iw_webSetParameters and forms/webSetMainRestart URIs.

 https://cve.radiocsirt.org/vuln/ghsa-353w-gjcf-9cx8 GHSA-353w-gjcf-9cx8 2026-10-08T17:18:38.443795+00:00

An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected against CSRF attacks, which allows an attacker to trick an administrator into executing actions without his/her knowledge, as demonstrated by the forms/iw_webSetParameters and forms/webSetMainRestart URIs.

 https://cve.radiocsirt.org/vuln/gsd-2018-10696 gsd-2018-10696 2026-10-08T17:18:38.443811+00:00 gsd-2018-10696 https://cve.radiocsirt.org/vuln/icsa-19-337-02 ICSA-19-337-02 — Moxa AWK-3121 2026-10-08T17:18:38.443822+00:00

The device uses HTTP traffic by default allowing insecure communication to the web server, which could allow an attacker to compromise sensitive data such as credentials.CVE-2018-10690 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). An attacker can navigate to a URL and download the system log without authentication, which may allow access to sensitive information.CVE-2018-10691 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A cross-site scripting attack allows access to session cookies, which may allow an attacker to login into the device.CVE-2018-10692 has been assigned to this vulnerability. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). An unauthorized user may execute network troubleshooting commands to cause a buffer overflow condition, which may allow the attacker to execute commands on the device.CVE-2018-10693 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The Wi-Fi connection used to set up the device is not encrypted by default, which may allow an attacker to capture sensitive data.CVE-2018-10694 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculat…