Skip to content
OpenAdvisories
High · 8.8 CVE-2023-34213 EUVD-2023-38310GHSA-xhr8-xhpc-4f2q

Second Order Command-injection Vulnerability in the Key-generation Function

Published Aug 17, 2023 · Updated Oct 28, 2024 · Assigned by Moxa

Description

TN-5900 Series firmware versions v3.3 and prior are vulnerable to command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.

Affected products

VendorProductAffectedFixed
Moxa TN-5900 Series 1.0 – ≤ 3.3 —

Advisories 1

References