Skip to content
OpenAdvisories
High · 8.8 CVE-2023-33237 EUVD-2023-37406GHSA-p33g-779c-ccmq

Authentication Bypass Without Administrator Privilege

Published Aug 17, 2023 · Updated Oct 28, 2024 · Assigned by Moxa

Description

TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability. This vulnerability arises from inadequate authentication measures implemented in the web API handler, allowing low-privileged APIs to execute restricted actions that only high-privileged APIs are allowed This presents a potential risk of unauthorized exploitation by malicious actors.

Affected products

VendorProductAffectedFixed
Moxa TN-5900 Series 1.0 – ≤ 3.3 —

Advisories 1

References