CVE-2019-5148
An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packet while unauthenticated to trigger this vulnerability.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - talos-cna@cisco.com
- Published
- 2020-02-25
- Last modified
- 2024-08-04
- Weaknesses
- CWE-125, CWE-191
Affected products
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0938
