Moxa AWK-3131A Wireless Access Point vulnerabilities

An information disclosure vulnerability exists in the Moxa AWK-3131A Wireless Access Point that can be exploited by an attacker. Retrieving a series of URLs without authentication can reveal sensitive configuration and system information.

A null pointer dereference vulnerability exists in the web application functionality of Moxa AWK-3131A Wireless Access Point running firmware version 1.1. Any HTTP GET request not preceded by a '/' will cause a segmentation fault in the web server.

An exploitable Cross-Site Request Forgery vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authentic request.

A Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality transmits the password in cleartext, allowing an attacker to intercept valid credentials.