https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:49:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-00993 bdu:2020-00993 https://cve.radiocsirt.org/vuln/bdu:2020-00993 https://cve.radiocsirt.org/vuln/certfr-2020-avi-110 certfr-2020-avi-110 https://cve.radiocsirt.org/vuln/certfr-2020-avi-110 https://cve.radiocsirt.org/vuln/cnvd-2020-13481 cnvd-2020-13481 https://cve.radiocsirt.org/vuln/cnvd-2020-13481 https://cve.radiocsirt.org/vuln/euvd-2026-49979 EUVD-2026-49979 https://cve.radiocsirt.org/vuln/euvd-2026-49979 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5142 <p>An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various authenticated requests to trigger this vulnerability.</p> <p>An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various authenticated requests to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-5142 https://cve.radiocsirt.org/vuln/ghsa-mxg6-6xh7-6x8r <p>An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various authenticated requests to trigger this vulnerability.</p> <p>An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various authenticated requests to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-mxg6-6xh7-6x8r https://cve.radiocsirt.org/vuln/gsd-2019-5142 gsd-2019-5142 https://cve.radiocsirt.org/vuln/gsd-2019-5142 https://cve.radiocsirt.org/vuln/icsa-20-063-04 <p>A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker needs to be authenticated as a low-privilege user to trigger this vulnerability.CVE-2019-5136 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The usage of hard-coded cryptographic keys allows for the decryption of captured traffic across the network to or from the device.CVE-2019-5137 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A specially crafted diagnostic script file can cause arbitrary commands to be executed, resulting in remote control over the device. An attacker needs to be authenticated as a low-privilege user to trigger this vulnerability.CVE-2019-5138 has been assigned to this vulnerability. A CVSS v3 base score of 9.9 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts.CVE-2019-5139 has been assigned to this vulnerability. A CVSS v3 base score of 6.2 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent system cal…</p> <p>A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker needs to be authenticated as a low-privilege user to trigger this vulnerability.CVE-2019-5136 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The usage of hard-coded cryptographic keys allows for the decryption of captured traffic across the network to or from the device.CVE-2019-5137 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A specially crafted diagnostic script file can cause arbitrary commands to be executed, resulting in remote control over the device. An attacker needs to be authenticated as a low-privilege user to trigger this vulnerability.CVE-2019-5138 has been assigned to this vulnerability. A CVSS v3 base score of 9.9 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts.CVE-2019-5139 has been assigned to this vulnerability. A CVSS v3 base score of 6.2 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent system cal…</p> https://cve.radiocsirt.org/vuln/icsa-20-063-04