Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2019-5140 | An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware versio… | High (8.8) | 2020-02-25 | Environment Specific |
| CVE-2019-5139 | An exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of the Moxa AWK-3131A firm… | High (7.1) | 2020-02-25 | Environment Specific |
| CVE-2019-5138 | An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131… | Critical (9.9) | 2020-02-25 | Environment Specific |
| CVE-2019-5137 | The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic… | High (7.5) | 2020-02-25 | Environment Specific |
| CVE-2019-5136 | An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware… | High (8.8) | 2020-02-25 | Environment Specific |