Moxa MXsecurity Series
Advisory ansehen veröffentlicht 2023-05-31
Successful exploitation of these vulnerabilities could allow an unauthorized user to bypass authentication or to execute arbitrary commands on the device.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-33236US | critical9.8OT erhöht | — | ||
MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequentl… | ||||
| CVE-2023-33235US | high8.8 | — | ||
MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have g… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Recommended Practicesexternal
- ICS Advisory ICSA-23-145-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-145-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenMXsecurity Series Software
Moxa has developed a solution to address these vulnerabilities. Users should upgrade to software v1.0.1 or higher.
https://www.moxa.com/en/products/industrial-network-infrastructure/network-management-software/mxsecurity-series?viewmode=0#resources - BehobenMXsecurity Series Software
Moxa has developed a solution to address these vulnerabilities. Users should upgrade to software v1.0.1 or higher.
https://www.moxa.com/en/products/industrial-network-infrastructure/network-management-software/mxsecurity-series?viewmode=0#resources
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan