Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/webSettingProfileSecurity can result in running OS commands as the root user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Moxa NPort W2x50A 操作系统命令注入漏洞
Vulnerability Description
Moxa NPort W2x50A是摩莎（Moxa）公司的一款用于将工业串口设备连上网络的串口通讯服务器。 采用2.2 Build_18082311之前版本固件的Moxa NPort W2x50A产品中的web server功能存在操作系统命令注入漏洞。攻击者可通过向/goform/webSettingProfileSecurity发送特制的HTTP POST请求利用该漏洞以root用户身份运行操作系统命令。
CVSS Information
N/A
Vulnerability Type
N/A