CVE-2016-8723
HighSummary
A null pointer dereference vulnerability exists in the web application functionality of Moxa AWK-3131A Wireless Access Point running firmware version 1.1. Any HTTP GET request not preceded by a '/' will cause a segmentation fault in the web server.
Risk Assessment
An attacker can send a variety of unexpected HTTP GET requests, potentially leading to server crashes and information leakage.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and to monitor HTTP traffic for suspicious requests.
Other vulnerabilities in Moxa AWK-3131A Wireless Access Point
See all- CVE-2016-8727High
An information disclosure vulnerability exists in the Moxa AWK-3131A Wireless Access Point that can be exploited by an attacker. Retrieving a series of URLs without authentication can reveal sensitive configuration and system information.
- CVE-2016-8718High
An exploitable Cross-Site Request Forgery vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authentic request.
- CVE-2016-8716High
A Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality transmits the password in cleartext, allowing an attacker to intercept valid credentials.
Original NVD description (English source)
An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Any HTTP GET request not preceded by an '/' will cause a segmentation fault in the web server. An attacker can send any of a multitude of potentially unexpected HTTP get requests to trigger this vulnerability.