Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-6786 EUVD-2024-47816GHSA-26q7-27mp-g4qj

MXview One Series vulnerable to Path Traversal

Published Sep 21, 2024 · Updated Sep 26, 2024 · Assigned by Moxa

Description

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.

Affected products

VendorProductAffectedFixed
Moxa MXview One Series < 1.4 1.4

Advisories 1

References