CVE-2018-10698 Hardcoded credentials in n/a
Attackers can access the device via Telnet using default credentials or sniff traffic due to unencrypted communication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-10698?
CVE-2018-10698 is a critical vulnerability in n/a, published on 7 Jun 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.
Weakness: CWE-311
Which versions are affected by CVE-2018-10698?
It affects 1 product.
Products include Moxa Awk-3121 Firmware.
How do I fix CVE-2018-10698?
No fix has been published for CVE-2018-10698 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-10698 being exploited?
There is no known exploitation of CVE-2018-10698 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-xvhw-jxmj-rx78.