https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:21:21.128861+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00636 bdu:2020-00636 2026-10-08T19:21:21.206162+00:00 bdu:2020-00636 https://cve.radiocsirt.org/vuln/certfr-2019-avi-598 certfr-2019-avi-598 — De multiples vulnérabilités ont été découvertes dans Moxa AWK-3121. Certaines d'entre elles permettent à un attaquant d… 2026-10-08T19:21:21.206200+00:00 certfr-2019-avi-598 https://cve.radiocsirt.org/vuln/cnvd-2019-17009 cnvd-2019-17009 2026-10-08T19:21:21.206219+00:00 cnvd-2019-17009 https://cve.radiocsirt.org/vuln/euvd-2026-64765 EUVD-2026-64765 2026-10-08T19:21:21.206232+00:00 EUVD-2026-64765 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10702 fkie_cve-2018-10702 2026-10-08T19:21:21.206242+00:00

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_filename" is susceptible to command injection via shell metacharacters.

 https://cve.radiocsirt.org/vuln/ghsa-v2h2-pvv7-ffw4 GHSA-v2h2-pvv7-ffw4 2026-10-08T19:21:21.206272+00:00

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_filename" is susceptible to command injection via shell metacharacters.

 https://cve.radiocsirt.org/vuln/gsd-2018-10702 gsd-2018-10702 2026-10-08T19:21:21.206288+00:00 gsd-2018-10702 https://cve.radiocsirt.org/vuln/icsa-19-337-02 ICSA-19-337-02 — Moxa AWK-3121 2026-10-08T19:21:21.206298+00:00

The device uses HTTP traffic by default allowing insecure communication to the web server, which could allow an attacker to compromise sensitive data such as credentials.CVE-2018-10690 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). An attacker can navigate to a URL and download the system log without authentication, which may allow access to sensitive information.CVE-2018-10691 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A cross-site scripting attack allows access to session cookies, which may allow an attacker to login into the device.CVE-2018-10692 has been assigned to this vulnerability. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). An unauthorized user may execute network troubleshooting commands to cause a buffer overflow condition, which may allow the attacker to execute commands on the device.CVE-2018-10693 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The Wi-Fi connection used to set up the device is not encrypted by default, which may allow an attacker to capture sensitive data.CVE-2018-10694 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculat…