CVE-2016-8721

9.1 CRITICAL

Published: April 20, 2017 Modified: May 13, 2026

Description

An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1. Specially crafted web form input can cause an OS Command Injection resulting in complete compromise of the vulnerable device. An attacker can exploit this vulnerability remotely.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.talosintelligence.com/reports/TALOS-2016-0235/

Source: talos-cna@cisco.com

Exploit Technical Description Third Party Advisory VDB Entry

http://www.talosintelligence.com/reports/TALOS-2016-0235/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Technical Description Third Party Advisory VDB Entry

2 reference(s) from NVD

Quick Stats

CVSS v3 Score

9.1 / 10.0

EPSS (Exploit Probability)

3.3%

87th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-78

Affected Vendors

moxa

Related CVEs

CVE-2026-48777 N/A

CVE-2026-47750 7.8

CVE-2026-47747 7.8

CVE-2026-46448 5.4

CVE-2026-22313 9.1