7.5
High
CVE-2019-5137 The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured…
Description
The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to the Moxa AWK-3131A firmware version 1.13.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Moxa | Versions not published |
References
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of Moxa
The 14 CVEs of Moxa →
CVE-2020-13537
An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8…
9.3
Critical
CVE-2020-13536
An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8…
9.3
Critical
CVE-2019-5139
An exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of the Moxa AWK-3131A…
6.2
Medium
CVE-2019-5143
An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A…
8.8
High