CVE-2023-3336: falha de média gravidade em Moxa TN-5900 Series
TN-5900 Series User Enumeration Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.6%
TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Moxa · TN-5900 SeriesCVEs relacionadas — Moxa TN-5900 Series
No mesmo produto, das mais perigosas para as menos.
CVE-2023-33239HIGHSecond Order Command-injection Vulnerability in the Key-generation FunctionEPSS 1.3%CVE-2023-33238HIGHCommand-injection Vulnerability in Certificate ManagementEPSS 0.8%CVE-2023-34213HIGHSecond Order Command-injection Vulnerability in the Key-generation FunctionEPSS 0.8%CVE-2023-34215HIGHSecond Order Command-injection Vulnerability in the Certificate-generation FunctionEPSS 0.7%CVE-2023-34216HIGHSecond Order Command-injection Vulnerability in the Key-delete FunctionEPSS 0.7%CVE-2023-33237HIGHAuthentication Bypass Without Administrator PrivilegeEPSS 0.6%