CVE-2016-8363
Last modified
CVE-2016-8363 is a vulnerability of currently unknown severity. An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server.. EPSS estimates a 1.85% chance of exploitation in the next 30 days.
Description
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Oncellg3470a-Lte Firmware | <= 10-31-2016 |
| Moxa | Awk-4131a Firmware | <= 10-31-2016 |
| Moxa | Awk-3191 Firmware | <= 05-30-2017 |
| Moxa | Awk-5232 Firmware | <= 05-30-2017 |
| Moxa | Awk-6232 Firmware | <= 05-30-2017 |
| Moxa | Awk-1121 Firmware | <= 06-29-2017 |
| Moxa | Awk-1127 Firmware | <= 06-29-2017 |
| Moxa | Wac-1001 V2 Firmware | <= 06-29-2017 |
| Moxa | Wac-2004 Firmware | <= 06-29-2017 |
| Moxa | Awk-3121-M12-Rtg Firmware | <= 06-29-2017 |
| Moxa | Awk-3131-M12-Rcc Firmware | <= 06-29-2017 |
| Moxa | Awk-5232-M12-Rcc Firmware | <= 06-29-2017 |
| Moxa | Awk-3131a Firmware | <= 10-31-2016 |
| Moxa | Awk-1131a Firmware | <= 10-31-2016 |
References
- http://www.securityfocus.com/bid/94092Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/94092Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-8363?
How severe is CVE-2016-8363?
How do I fix CVE-2016-8363?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-8357An issue was discovered in Lynxspring JENEsys BAS Bridge ver…
- CVE-2016-8358An issue was discovered in Smiths-Medical CADD-Solis Medicat…
- CVE-2016-8359An issue was discovered in Moxa ioLogik E1210, firmware Vers…6.1
- CVE-2016-8360An issue was discovered in Moxa SoftCMS versions prior to Ve…
- CVE-2016-8361An issue was discovered in Lynxspring JENEsys BAS Bridge ver…
- CVE-2016-8362An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK…
- CVE-2016-8364An issue was discovered in IBHsoftec S7-SoftPLC prior to 4.1…
- CVE-2016-8365OSIsoft PI System software (Applications using PI Asset Fram…
- CVE-2016-8366Webvisit in Phoenix Contact ILC PLCs offers a password macro…
- CVE-2016-8367An issue was discovered in Schneider Electric Magelis HMI Ma…5.3
- CVE-2016-8368An issue was discovered in Mitsubishi Electric Automation ME…8.6
- CVE-2016-8369An issue was discovered in Lynxspring JENEsys BAS Bridge ver…
Are you affected by CVE-2016-8363?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST