CVE-2015-7244

Published 04 Nov 2015 · Updated 06 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.0%

The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently does not require authentication for X11 connections, which allows remote attackers to execute arbitrary commands or obtain sensitive information via X11 packets.

Affected products

n/a · n/a

References

http://blog.mobatek.net/post/mobaxterm-new-release-8.3/http://www.kb.cert.org/vuls/id/316888 http://www.securifera.com/advisories/cve-2015-7244