CVE-2023-34214: fallo de gravedad alta en Moxa TN-4900 Series
Second Order Command-injection Vulnerability in the Certificate-generation Function
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.2epss 0.4%
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-generation function, which could potentially allow malicious users to execute remote code on affected devices.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Moxa · EDR-810 SeriesMoxa · EDR-G902 SeriesMoxa · EDR-G903 SeriesMoxa · TN-4900 SeriesMoxa · TN-5900 SeriesCVEs relacionadas — Moxa TN-4900 Series
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-9139HIGHOS Command Injection in Restricted CommandEPSS 1.4%CVE-2023-33239HIGHSecond Order Command-injection Vulnerability in the Key-generation FunctionEPSS 1.3%CVE-2024-9138HIGHPrivilege Escalation in Cellular Router, Secure Router, and Network Security AppliancesEPSS 1.1%CVE-2025-0676HIGHCommend Injection Leading to Privilege EscalationEPSS 1.0%CVE-2023-33238HIGHCommand-injection Vulnerability in Certificate ManagementEPSS 0.8%CVE-2023-34216HIGHSecond Order Command-injection Vulnerability in the Key-delete FunctionEPSS 0.7%