AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2017-14459

CRITICAL · CVSS 10 EPSS 12.83% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-04-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2017-14459
Severity
CRITICAL
CVSS
10
EPSS
12.83%

Original Filing — NVD Description

An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client in firmware versions 1.4 to 1.7 (current). An attacker can inject commands via the username parameter of several services (SSH, Telnet, console), resulting in remote, unauthenticated, root-level operating system command execution.