{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cul\u003e \u003cli\u003eOnCell G3150A versions 1.5 et ant\u00e9rieures.\u003c/li\u003e \u003cli\u003eOnCell G3470A versions 1.7 et ant\u00e9rieures.\u003c/li\u003e \u003cli\u003eWDR-3124A versions 1.3 et ant\u00e9rieures.\u003c/li\u003e \u003cli\u003eTAP-213 versions 1.2 et ant\u00e9rieures.\u003c/li\u003e \u003cli\u003eTAP-323 versions 1.3 et ant\u00e9rieures.\u003c/li\u003e \u003cli\u003eAWK-3131A versions 1.16 et ant\u00e9rieures.\u003c/li\u003e \u003cli\u003eAWK-4131A versions 1.16 et ant\u00e9rieures.\u003c/li\u003e \u003cli\u003eAWK-1131A versions 1.22 et ant\u00e9rieures.\u003c/li\u003e \u003cli\u003eAWK-1137C versions 1.6 et ant\u00e9rieures.\u003c/li\u003e \u003c/ul\u003e \u003cp\u003eMoxa a publi\u00e9 un correctif du microgiciel pour les vuln\u00e9rabilit\u00e9s CVE-2021-37756 et CVE-2021-37758 ainsi que des mesures de contournement pour les autres vuln\u00e9rabilit\u00e9s.\u003c/p\u003e ",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\nmesures de contournement et des correctifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-37753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37753"
    },
    {
      "name": "CVE-2021-37756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37756"
    },
    {
      "name": "CVE-2021-37757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37757"
    },
    {
      "name": "CVE-2021-37758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37758"
    },
    {
      "name": "CVE-2021-37751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37751"
    },
    {
      "name": "CVE-2021-37752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37752"
    },
    {
      "name": "CVE-2021-37754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37754"
    },
    {
      "name": "CVE-2021-37755",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37755"
    }
  ],
  "initial_release_date": "2021-12-30T00:00:00",
  "last_revision_date": "2021-12-30T00:00:00",
  "links": [],
  "reference": "CERTFR-2021-AVI-988",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-12-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Moxa.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Moxa",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Moxa du 30 d\u00e9cembre 2021",
      "url": "https://www.moxa.com/en/support/product-support/security-advisory/awk-3131a-4131a-1131a-1137c-wireless-ap-bridge-client-vulnerabilities"
    }
  ]
}