CVE-2016-8724

MEDIUM

Moxa AWK-3131A Wireless Access Point <1.1 - Info Disclosure

Title source: llm

Description

An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted TCP query will allow an attacker to retrieve potentially sensitive information.

References (1)

Core 1

Core References

Exploit, Mitigation, Third Party Advisory x_refsource_misc

http://www.talosintelligence.com/reports/TALOS-2016-0238/

Scores

CVSS v3 5.3

EPSS 0.0321

EPSS Percentile 87.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

Moxa/AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client 1.1

moxa/awk-3131a_firmware 1.1

Published Apr 13, 2017

Tracked Since Feb 18, 2026