CVE-2018-10700: moxa awk-3121_firmware Cross-site Scripting
Vulnerability summary
CVE-2018-10700 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in moxa awk-3121_firmware. EPSS estimates a 38.32% chance of exploitation in the next 30 days, higher than 98.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 07-06-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows an attacker to execute XSS by injecting an XSS payload. The POST parameter "iw_board_deviceName" is susceptible to this injection.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
38.32%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 38.32% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMoxa Awk 1121
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Moxa1 product
1 vendor · 1 product
References
3 links- github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121X Refsource MISCExploitThird Party Advisory
- packetstormsecurity.com/files/…X Refsource MISC