CVE-2023-39980highCWE-89

CVE-2023-39980: high-severity vulnerability in Moxa MXsecurity Series

MXsecurity Authenticated Information Disclosure Due to SQL Injection

Published · Updated

Follow this CVE+ Monitor MXsecurity Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.7%
A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity versions prior to v1.0.1. This vulnerability arises when special elements are not neutralized correctly, allowing remote attackers to alter SQL commands.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Affected products
Moxa · MXsecurity Series
Related CVEs — Moxa MXsecurity Series

In the same product, most dangerous first.

CVE-2023-33235HIGHMXsecurity Command Injection VulnerabilityEPSS 1.4%CVE-2023-39979CRITICALMXsecurity Authentication BypassEPSS 1.0%CVE-2023-33236CRITICALMXsecurity Hardcoded Credential VulnerabilityEPSS 1.0%CVE-2023-39981HIGHMXsecurity Device Information DisclosureEPSS 0.8%CVE-2023-39983MEDIUMMXsecurity Register Database PollutionEPSS 0.6%CVE-2023-39982HIGHMXsecurity Hardcoded CredentialEPSS 0.4%