CVE-2016-8363

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server.
References
Link Resource
http://www.securityfocus.com/bid/94092 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:moxa:oncellg3470a-lte_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:oncellg3470a-lte:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:moxa:awk-4131a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-4131a:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:moxa:awk-3191_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-3191:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:moxa:awk-5232_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-5232:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:moxa:awk-6232_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-6232:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:moxa:awk-1121_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-1121:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:moxa:awk-1127_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-1127:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:moxa:wac-1001_v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:wac-1001_v2:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:moxa:wac-2004_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:wac-2004:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:moxa:awk-3121-m12-rtg_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-3121-m12-rtg:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:moxa:awk-3131-m12-rcc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-3131-m12-rcc:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:moxa:awk-5232-m12-rcc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-5232-m12-rcc:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:moxa:awk-3131a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-3131a:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:moxa:awk-1131a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:awk-1131a:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-02-13 21:59

Updated : 2023-12-10 12:01


NVD link : CVE-2016-8363

Mitre link : CVE-2016-8363

CVE.ORG link : CVE-2016-8363


JSON object : View

Products Affected

moxa

  • wac-2004_firmware
  • awk-3131a_firmware
  • awk-5232-m12-rcc
  • awk-1121
  • awk-5232
  • awk-5232_firmware
  • awk-3191
  • awk-6232_firmware
  • awk-3191_firmware
  • awk-1127
  • wac-1001_v2_firmware
  • awk-3121-m12-rtg_firmware
  • awk-4131a
  • awk-4131a_firmware
  • awk-3131-m12-rcc_firmware
  • awk-3121-m12-rtg
  • oncellg3470a-lte_firmware
  • awk-1131a_firmware
  • awk-5232-m12-rcc_firmware
  • wac-2004
  • awk-3131-m12-rcc
  • awk-3131a
  • awk-1131a
  • oncellg3470a-lte
  • wac-1001_v2
  • awk-1121_firmware
  • awk-6232
  • awk-1127_firmware
CWE
CWE-264

Permissions, Privileges, and Access Controls