Moxa MXsecurity Series
view advisory published 2023-05-31
Successful exploitation of these vulnerabilities could allow an unauthorized user to bypass authentication or to execute arbitrary commands on the device.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-33236US | critical9.8OT elevated | — | ||
MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequentl… | ||||
| CVE-2023-33235US | high8.8 | — | ||
MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have g… | ||||
02
references
External citations — patches, advisories, analysis.
- Recommended Practicesexternal
- ICS Advisory ICSA-23-145-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-145-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedMXsecurity Series Software
Moxa has developed a solution to address these vulnerabilities. Users should upgrade to software v1.0.1 or higher.
https://www.moxa.com/en/products/industrial-network-infrastructure/network-management-software/mxsecurity-series?viewmode=0#resources - FixedMXsecurity Series Software
Moxa has developed a solution to address these vulnerabilities. Users should upgrade to software v1.0.1 or higher.
https://www.moxa.com/en/products/industrial-network-infrastructure/network-management-software/mxsecurity-series?viewmode=0#resources
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan