CVE-2016-8727
HighSummary
An information disclosure vulnerability exists in the Moxa AWK-3131A Wireless Access Point that can be exploited by an attacker. Retrieving a series of URLs without authentication can reveal sensitive configuration and system information.
Risk Assessment
The organization may be exposed to the disclosure of confidential data, potentially leading to further attacks or system compromise.
Recommendation
It is recommended to implement appropriate authentication mechanisms and monitor access to the device to minimize the risk of information disclosure.
Other vulnerabilities in Moxa AWK-3131A Wireless Access Point
See all- CVE-2016-8723High
A null pointer dereference vulnerability exists in the web application functionality of Moxa AWK-3131A Wireless Access Point running firmware version 1.1. Any HTTP GET request not preceded by a '/' will cause a segmentation fault in the web server.
- CVE-2016-8718High
An exploitable Cross-Site Request Forgery vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authentic request.
- CVE-2016-8716High
A Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality transmits the password in cleartext, allowing an attacker to intercept valid credentials.
Original NVD description (English source)
An exploitable information disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point. Retrieving a series of URLs without authentication can reveal sensitive configuration and system information to an attacker.