https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:25:39.839745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-598 certfr-2019-avi-598 — De multiples vulnérabilités ont été découvertes dans Moxa AWK-3121. Certaines d'entre elles permettent à un attaquant d… 2026-10-08T21:25:39.912216+00:00 certfr-2019-avi-598 https://cve.radiocsirt.org/vuln/cnvd-2019-17005 cnvd-2019-17005 2026-10-08T21:25:39.912269+00:00 cnvd-2019-17005 https://cve.radiocsirt.org/vuln/euvd-2026-64745 EUVD-2026-64745 2026-10-08T21:25:39.912297+00:00 EUVD-2026-64745 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10698 fkie_cve-2018-10698 2026-10-08T21:25:39.912318+00:00

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.

 https://cve.radiocsirt.org/vuln/ghsa-xvhw-jxmj-rx78 GHSA-xvhw-jxmj-rx78 2026-10-08T21:25:39.912363+00:00

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.

 https://cve.radiocsirt.org/vuln/gsd-2018-10698 gsd-2018-10698 2026-10-08T21:25:39.912393+00:00 gsd-2018-10698 https://cve.radiocsirt.org/vuln/icsa-19-337-02 ICSA-19-337-02 — Moxa AWK-3121 2026-10-08T21:25:39.912411+00:00

The device uses HTTP traffic by default allowing insecure communication to the web server, which could allow an attacker to compromise sensitive data such as credentials.CVE-2018-10690 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). An attacker can navigate to a URL and download the system log without authentication, which may allow access to sensitive information.CVE-2018-10691 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A cross-site scripting attack allows access to session cookies, which may allow an attacker to login into the device.CVE-2018-10692 has been assigned to this vulnerability. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). An unauthorized user may execute network troubleshooting commands to cause a buffer overflow condition, which may allow the attacker to execute commands on the device.CVE-2018-10693 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The Wi-Fi connection used to set up the device is not encrypted by default, which may allow an attacker to capture sensitive data.CVE-2018-10694 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculat…