Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-39979 EUVD-2023-43672GHSA-vv74-p9wh-mpf3

MXsecurity Authentication Bypass

Published Sep 2, 2023 · Updated Sep 30, 2024 · Assigned by Moxa

Description

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.  

Affected products

VendorProductAffectedFixed
Moxa MXsecurity Series 1.0 – ≤ 1.0.1 —

Advisories 1

References