CVE Catalog

CVE-2016-8363

Critical
Published: Translated: NVD NIST

Summary

An issue was discovered in Moxa OnCell OnCellG3470A-LTE and various AWK and WAC series devices that allows a user to execute arbitrary OS commands on the server.

Risk Assessment

Exploitation of this vulnerability could lead to full system compromise, posing a serious security threat to the organization.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS