Moxa Awk-3121 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Moxa Awk-3121 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2018-10698 — CVSS 9.8 (critical): An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker…
• CVE-2018-10703 — CVSS 8.8 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to…
• CVE-2018-10696 — CVSS 8.8 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device…
• CVE-2018-10697 — CVSS 8.8 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute…
• CVE-2018-10699 — CVSS 8.8 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator…
• CVE-2018-10701 — CVSS 8.8 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to…
• CVE-2018-10702 — CVSS 8.8 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to…
• CVE-2018-10693 — CVSS 8.8 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to…
• CVE-2018-10695 — CVSS 8.8 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her…
• CVE-2018-10694 — CVSS 8.1 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not use any encryption…
• CVE-2018-10690 — CVSS 8.1 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication…
• CVE-2018-10691 — CVSS 7.5 (high): An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log (the system log)…
• CVE-2018-10692 — CVSS 6.1 (medium): An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an…
• CVE-2018-10700 — CVSS 6.1 (medium): An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the…