Unauthenticated Information Disclosure in Moxa AWK-3131A Series Industrial Wireless AP/Bridge/Client

Unauthenticated Information Disclosure in Moxa AWK-3131A Series Industrial Wireless AP/Bridge/Client

CVE-2016-8722 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client. Retrieving a specific URL without authentication can reveal sensitive information to an attacker.

Learn more about our Web App Pen Testing.