Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-39983 EUVD-2023-43676GHSA-5r9f-76wq-x3p4

MXsecurity Register Database Pollution

Published Sep 2, 2023 · Updated Sep 30, 2024 · Assigned by Moxa

Description

A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application.

Affected products

VendorProductAffectedFixed
Moxa MXsecurity Series 1.0 – ≤ 1.0.1 —

Advisories 1

References