CVE-2016-8363

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server.

• moxa oncellg3470a-lte firmware (<= 10-31-2016) • moxa awk-4131a firmware (<= 10-31-2016) • moxa awk-3191 firmware (<= 05-30-2017) • moxa awk-5232 firmware (<= 05-30-2017) • moxa awk-6232 firmware (<= 05-30-2017) • moxa awk-1121 firmware (<= 06-29-2017) • moxa awk-1127 firmware (<= 06-29-2017) • moxa wac-1001 v2 firmware (<= 06-29-2017) • moxa wac-2004 firmware (<= 06-29-2017) • moxa awk-3121-m12-rtg firmware (<= 06-29-2017) • moxa awk-3131-m12-rcc firmware (<= 06-29-2017) • moxa awk-5232-m12-rcc firmware (<= 06-29-2017) • moxa awk-3131a firmware (<= 10-31-2016) • moxa awk-1131a firmware (<= 10-31-2016)