https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:57:45.709601+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00997 bdu:2020-00997 2026-10-02T22:57:45.730563+00:00 bdu:2020-00997 https://cve.radiocsirt.org/vuln/certfr-2020-avi-110 certfr-2020-avi-110 — De multiples vulnérabilités ont été découvertes dans Moxa AWK-3131A. Certaines d'entre elles permettent à un attaquant… 2026-10-02T22:57:45.730599+00:00 certfr-2020-avi-110 https://cve.radiocsirt.org/vuln/cnvd-2020-13493 cnvd-2020-13493 2026-10-02T22:57:45.730619+00:00 cnvd-2020-13493 https://cve.radiocsirt.org/vuln/euvd-2026-50032 EUVD-2026-50032 2026-10-02T22:57:45.730631+00:00 EUVD-2026-50032 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5162 fkie_cve-2019-5162 2026-10-02T22:57:45.730642+00:00

An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-536j-cvcw-6cqq GHSA-536j-cvcw-6cqq 2026-10-02T22:57:45.730670+00:00

An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2019-5162 gsd-2019-5162 2026-10-02T22:57:45.730686+00:00 gsd-2019-5162 https://cve.radiocsirt.org/vuln/icsa-20-063-04 ICSA-20-063-04 — Moxa AWK-3131A Series Industrial AP/Bridge/Client 2026-10-02T22:57:45.730696+00:00

A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker needs to be authenticated as a low-privilege user to trigger this vulnerability.CVE-2019-5136 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The usage of hard-coded cryptographic keys allows for the decryption of captured traffic across the network to or from the device.CVE-2019-5137 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A specially crafted diagnostic script file can cause arbitrary commands to be executed, resulting in remote control over the device. An attacker needs to be authenticated as a low-privilege user to trigger this vulnerability.CVE-2019-5138 has been assigned to this vulnerability. A CVSS v3 base score of 9.9 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts.CVE-2019-5139 has been assigned to this vulnerability. A CVSS v3 base score of 6.2 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent system cal…