Skip to content
OpenAdvisories
High WID-SEC-2023-2089 8 CVEs

Moxa Router: Mehrere Schwachstellen

Published Aug 16, 2023 · Updated Aug 16, 2023 · de-DE

Vendor: Moxa Product: Router Product: Router TN-4900 Series <= 1.2.4 Product: Router TN-5900 Series < 3.4

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Moxa Router ausnutzen, uum beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen oder seine Privilegien zu erweitern.

Product

Moxa Router sind Router für industrielle Anwendungen die darauf ausgelegt sind, in anspruchsvollen Umgebungen zuverlässige und sichere Netzwerkkonnektivität zu bieten.

Vulnerabilities 8

  • High 8.8
    CVE-2023-33237

    Authentication Bypass Without Administrator Privilege

    TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability. This vulnerability arises from inadequate authentication measures implemented in the web API handler, allowing low-privileged APIs to execute restricted act…

    Moxa TN-5900 Series ICS / OT
  • High 8.8
    CVE-2023-33239

    Second Order Command-injection Vulnerability in the Key-generation Function

    TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which coul…

    Moxa EDR-G9010 Series TN-4900 Series NAT-102 Series ICS / OT
  • High 8.8
    CVE-2023-34213

    Second Order Command-injection Vulnerability in the Key-generation Function

    TN-5900 Series firmware versions v3.3 and prior are vulnerable to command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the key-generation function, which could potentially allow malicious …

    Moxa TN-5900 Series ICS / OT
  • High 8.1
    CVE-2023-34216

    Second Order Command-injection Vulnerability in the Key-delete Function

    TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could …

    Moxa EDR-G9010 Series TN-4900 Series NAT-102 Series ICS / OT
  • High 8.1
    CVE-2023-34217

    Second Order Command-injection Vulnerability in the Certificate-delete Function

    TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-delete function, which …

    Moxa EDR-G9010 Series TN-4900 Series NAT-102 Series ICS / OT
  • High 7.2
    CVE-2023-33238

    Command-injection Vulnerability in Certificate Management

    TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from inadequate input validation in the certificate management function, whic…

    Moxa EDR-G9010 Series TN-4900 Series NAT-102 Series ICS / OT
  • High 7.2
    CVE-2023-34214

    Second Order Command-injection Vulnerability in the Certificate-generation Function

    TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-generation function, wh…

    Moxa TN-4900 Series TN-5900 Series EDR-810 Series ICS / OT
  • High 7.2
    CVE-2023-34215

    Second Order Command-injection Vulnerability in the Certificate-generation Function

    TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the certification-generation function, which could potentially al…

    Moxa TN-5900 Series ICS / OT

Revision history

  1. #1

    Initiale Fassung

References