An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/net_WebPingGetValue can result in running OS commands as the root user. This is similar to CVE-2017-12120.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-12-06T23:00:00
Updated: 2024-08-05T11:44:20.108Z
Reserved: 2018-11-29T00:00:00
Link: CVE-2018-19659
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-12-06T23:29:01.297
Modified: 2019-01-30T18:47:58.563
Link: CVE-2018-19659
Redhat
No data.