CVE-2016-8723 Null dereference in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
An attacker can cause a denial of service in Moxa AWK-3131A wireless access points by sending malformed HTTP GET requests that trigger a null pointer dereference.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-8723?
CVE-2016-8723 is a high-severity vulnerability in Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client, published on 13 Apr 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Any HTTP GET request not preceded by an '/' will cause a segmentation fault in the web server. An attacker can send any of a multitude of potentially unexpected HTTP get requests to trigger this vulnerability.
Weakness: CWE-476
Which versions are affected by CVE-2016-8723?
It affects 1 product.
Products include Moxa Awk-3131a Firmware.
How do I fix CVE-2016-8723?
No fix has been published for CVE-2016-8723 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-8723 being exploited?
There is no known exploitation of CVE-2016-8723 in the wild and no public exploit code.
Other vulnerabilities in Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client
Sources
Also known as GHSA-29hm-xg54-5w5x.