← Vulnerability feed

Vulnerability record · CVE-2018-10693 · published 7 June 2019

CVE-2018-10693: Moxa awk-3121 firmware memory buffer overflow vulnerability

Moxa · Awk 3121 Firmware

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is susceptible to a buffer overflow. By crafting a packet that contains a string of 516 characters, it is possible for an attacker to execute the attack.

8.8 CVSS 3.0 High EPSS 2.6% · top 15.2% CWE-119 · Memory buffer overflow
8.8CVSS 3.0 base score, v2 6.8
2.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is susceptible to a buffer overflow. By crafting a packet that contains a string of 516 characters, it is possible for an attacker to execute the attack.

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 ExploitThird Party Advisory
https://seclists.org/bugtraq/2019/Jun/8 Mailing ListThird Party Advisory
http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 ExploitThird Party Advisory
https://seclists.org/bugtraq/2019/Jun/8 Mailing ListThird Party Advisory

Track CVE-2018-10693 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-10698Moxa awk-3121 firmware missing encryption vulnerabilityAn issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has b…EPSS 2.3%8.8CVE-2018-10695Moxa awk-3121 firmware memory buffer overflow vulnerabilityAn issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account wh…EPSS 3.4%8.8CVE-2018-10696Moxa awk-3121 firmware cross-site request forgery vulnerabilityAn issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, t…EPSS 1.1%8.8CVE-2018-10697Moxa awk-3121 firmware os command injection vulnerabilityAn issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls …EPSS 3.7%8.8CVE-2018-10699Moxa awk-3121 firmware os command injection vulnerabilityAn issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator can upload a…EPSS 2.0%8.8CVE-2018-10701Moxa awk-3121 firmware memory buffer overflow vulnerabilityAn issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troublesho…EPSS 2.6%8.8CVE-2018-10702Moxa awk-3121 firmware os command injection vulnerabilityAn issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troublesho…EPSS 5.4%8.8CVE-2018-10703Moxa awk-3121 firmware memory buffer overflow vulnerabilityAn issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troublesho…EPSS 2.6%

Source: NIST National Vulnerability Database (record CVE-2018-10693), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.