CVE-2016-8716 Information disclosure in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
An attacker can intercept cleartext password transmissions during password changes to obtain valid credentials for the Moxa wireless access point.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-8716?
CVE-2016-8716 is a high-severity vulnerability in Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client, published on 12 Apr 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality of the Web Application transmits the password in cleartext. An attacker capable of intercepting this traffic is able to obtain valid credentials.
Weakness: CWE-640
Which versions are affected by CVE-2016-8716?
It affects 1 product.
Products include Moxa Awk-3131a Firmware.
How do I fix CVE-2016-8716?
No fix has been published for CVE-2016-8716 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-8716 being exploited?
There is no known exploitation of CVE-2016-8716 in the wild and no public exploit code.
Other vulnerabilities in Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Sources
Also known as GHSA-pr5m-wxj4-mr3r.