CVE-2016-8712

Published: Apr 13, 2017Modified: May 13, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds.

Affected (1)

Products: Moxa: Awk 3131a Firmware

1 product

Awk 3131a Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Awk 3131a Firmware	Version 1.1

Running on/with	Platform Versions
Moxa Awk 3131a	All versions

Related CWEs

Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (2)

http://www.talosintelligence.com/reports/TALOS-2016-0225/

Source: talos-cna@cisco.com

ExploitMitigationThird Party Advisory

http://www.talosintelligence.com/reports/TALOS-2016-0225/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMitigationThird Party Advisory

Timeline

No history available yet.