Description
MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Moxa | MXsecurity Series | 1.0 | — |
Advisories 2
- ICSA-23-145-01 Moxa MXsecurity Series CISA ICS & IT advisories · May 31, 2023
- WID-SEC-2023-1317 Moxa MXsecurity: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 29, 2023