Description
TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Moxa | TN-5900 Series | 1.0 – ≤ 3.3 | — |
Advisories 1
- WID-SEC-2023-1628 Moxa Router: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jul 2, 2023