CVE-2016-8717 Hardcoded credentials in Moxa
Attackers can gain full root control of Moxa AWK-3131A devices by exploiting hard-coded credentials in the firmware.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-8717?
CVE-2016-8717 is a critical vulnerability in Talos Moxa, published on 2 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocumented, privileged (root) account with hard-coded credentials, giving attackers full control of affected devices.
Weakness: CWE-798
Which versions are affected by CVE-2016-8717?
It affects 1 product.
Products include Moxa Awk-3131a Firmware.
How do I fix CVE-2016-8717?
No fix has been published for CVE-2016-8717 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-8717 being exploited?
There is no known exploitation of CVE-2016-8717 in the wild and no public exploit code.
Other vulnerabilities in Talos Moxa
Sources
Also known as GHSA-244f-3h24-62fj.