CVE-2016-8720: Moxa Awk-3131a Firmware

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

An exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of the Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted HTTP request can inject a payload in the bkpath parameter which will be copied in to Location header of the HTTP response.

Affected products

• Moxa Awk-3131a Firmware: version 1.1 only

Published 2017-04-13. Last modified 2026-06-17.