Known vulnerabilities in AWK-3131A Series

Known vulnerabilities in AWK-3131A Series

Vendor: Moxa

Software: AWK-3131A Series

Software CPE: cpe:2.3:h:moxa:awk-3131a_series:*:*:*:*:*:*:*:*

Website: https://www.moxa.com/

Total vulnerabilities: 19

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU49846 - Heap-based Buffer Overflow CVE-2020-25687	CWE-122	Medium	No	No	1.17	20.01.2021	SB2021012070 SB20210120109 SB20210120122 and 12 more
#VU49845 - Insufficient Verification of Data Authenticity CVE-2020-25686	CWE-345	Low	Available	No	1.17	20.01.2021	SB2021012070 SB20210120108 SB20210120122 and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-25685	CWE-327	Low	Available	No	1.17	20.01.2021	SB2021012070 SB20210120107 SB20210120122 and 27 more
#VU49843 - Insufficient Verification of Data Authenticity CVE-2020-25684	CWE-345	Low	Available	No	1.17	20.01.2021	SB2021012070 SB20210120106 SB20210120122 and 27 more
#VU49842 - Heap-based Buffer Overflow CVE-2020-25683	CWE-122	Medium	No	No	1.17	20.01.2021	SB2021012070 SB20210120105 SB20210120122 and 12 more
#VU49841 - Heap-based Buffer Overflow CVE-2020-25682	CWE-122	High	No	No	1.17	20.01.2021	SB2021012070 SB20210120104 SB20210120122 and 14 more
#VU49840 - Heap-based Buffer Overflow CVE-2020-25681	CWE-122	High	No	No	1.17	20.01.2021	SB2021012070 SB20210120103 SB20210120122 and 14 more
#VU25534 - Authentication Bypass Using an Alternate Path or Channel CVE-2019-5165	CWE-288	Medium	No	No	-	24.02.2020	SB2020022406
#VU25533 - Improper Access Control CVE-2019-5162	CWE-284	High	No	No	-	24.02.2020	SB2020022406
#VU25532 - Stack-based buffer overflow CVE-2019-5153	CWE-121	High	No	No	-	24.02.2020	SB2020022406
#VU25531 - Out-of-bounds read CVE-2019-5148	CWE-125	Medium	No	No	-	24.02.2020	SB2020022406
#VU25530 - Memory corruption CVE-2019-5143	CWE-119	High	No	No	-	24.02.2020	SB2020022406
#VU25529 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-5142	CWE-78	High	No	No	-	24.02.2020	SB2020022406
#VU25528 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-5141	CWE-78	High	No	No	-	24.02.2020	SB2020022406
#VU25527 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-5140	CWE-78	High	No	No	-	24.02.2020	SB2020022406
#VU25526 - Use of Hard-coded Credentials CVE-2019-5139	CWE-798	Medium	No	No	-	24.02.2020	SB2020022406
#VU25525 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-5138	CWE-78	High	No	No	-	24.02.2020	SB2020022406
#VU25524 - Use of Hard-coded Cryptographic Key CVE-2019-5137	CWE-321	Medium	No	No	-	24.02.2020	SB2020022406
#VU25523 - Improper Access Control CVE-2019-5136	CWE-284	High	No	No	-	24.02.2020	SB2020022406