Skip to content
OpenAdvisories
Critical ICSA-23-145-01 2 CVEs

Moxa MXsecurity Series

Published May 31, 2023 · Updated May 31, 2023

Vendor: Moxa Product: MXsecurity Series Software

Summary

Successful exploitation of these vulnerabilities could allow an unauthorized user to bypass authentication or to execute arbitrary commands on the device.

Vulnerabilities 2

  • Critical 9.8
    CVE-2023-33236

    MXsecurity Hardcoded Credential Vulnerability

    MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.

    Moxa MXsecurity Series ICS / OT
  • High 7.2
    CVE-2023-33235

    MXsecurity Command Injection Vulnerability

    MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted s…

    Moxa MXsecurity Series ICS / OT

Revision history

  1. #1

    CSAF Creation Date

References