CVE-2023-39979criticalCWE-334

CVE-2023-39979: critical vulnerability in Moxa MXsecurity Series

MXsecurity Authentication Bypass

Published · Updated

Follow this CVE+ Monitor MXsecurity Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.0%
In short

MXsecurity versions before 1.0.1 have a flaw that allows attackers to bypass login checks because the authentication system doesn't generate unpredictable enough random values. This means someone from the internet could potentially gain unauthorized access to the system.

Technical detail

The vulnerability stems from insufficient randomness (CWE-334) in the web service authenticator, enabling remote attackers to predict or forge authentication tokens without valid credentials. Pre-condition: target runs vulnerable MXsecurity <1.0.1; impact includes complete authentication bypass and unauthorized system access.

Summary generated and translated by AI from the official description.
There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.  
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Moxa · MXsecurity Series
Related CVEs — Moxa MXsecurity Series

In the same product, most dangerous first.

CVE-2023-33235HIGHMXsecurity Command Injection VulnerabilityEPSS 1.4%CVE-2023-33236CRITICALMXsecurity Hardcoded Credential VulnerabilityEPSS 1.0%CVE-2023-39981HIGHMXsecurity Device Information DisclosureEPSS 0.8%CVE-2023-39980HIGHMXsecurity Authenticated Information Disclosure Due to SQL InjectionEPSS 0.7%CVE-2023-39983MEDIUMMXsecurity Register Database PollutionEPSS 0.6%CVE-2023-39982HIGHMXsecurity Hardcoded CredentialEPSS 0.4%