cve/2017/CVE-2017-14459.md

### [CVE-2017-14459](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14459)
![](https://img.shields.io/static/v1?label=Product&message=Moxa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=remote%20code%20execution&color=brighgreen)

### Description

An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client in firmware versions 1.4 to 1.7 (current). An attacker can inject commands via the username parameter of several services (SSH, Telnet, console), resulting in remote, unauthenticated, root-level operating system command execution.

### POC

#### Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2017-0507

#### Github
No PoCs found on GitHub currently.