CVE-2016-8716
HighSummary
A Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality transmits the password in cleartext, allowing an attacker to intercept valid credentials.
Risk Assessment
An attacker capable of intercepting this traffic can obtain valid credentials, posing a significant security risk to the system.
Recommendation
It is recommended to update the firmware to the latest version and implement encryption for data transmission to secure the transmitted passwords.
Other vulnerabilities in Moxa AWK-3131A Wireless Access Point
See all- CVE-2016-8727High
An information disclosure vulnerability exists in the Moxa AWK-3131A Wireless Access Point that can be exploited by an attacker. Retrieving a series of URLs without authentication can reveal sensitive configuration and system information.
- CVE-2016-8723High
A null pointer dereference vulnerability exists in the web application functionality of Moxa AWK-3131A Wireless Access Point running firmware version 1.1. Any HTTP GET request not preceded by a '/' will cause a segmentation fault in the web server.
- CVE-2016-8718High
An exploitable Cross-Site Request Forgery vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authentic request.
Original NVD description (English source)
An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality of the Web Application transmits the password in cleartext. An attacker capable of intercepting this traffic is able to obtain valid credentials.