CVE-2023-39982: falha de alta gravidade em Moxa MXsecurity Series
MXsecurity Hardcoded Credential
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.4%
A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle attacks and enable the decryption of SSH traffic.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Moxa · MXsecurity SeriesCVEs relacionadas — Moxa MXsecurity Series
No mesmo produto, das mais perigosas para as menos.
CVE-2023-33235HIGHMXsecurity Command Injection VulnerabilityEPSS 1.4%CVE-2023-39979CRITICALMXsecurity Authentication BypassEPSS 1.0%CVE-2023-33236CRITICALMXsecurity Hardcoded Credential VulnerabilityEPSS 1.0%CVE-2023-39981HIGHMXsecurity Device Information DisclosureEPSS 0.8%CVE-2023-39980HIGHMXsecurity Authenticated Information Disclosure Due to SQL InjectionEPSS 0.7%CVE-2023-39983MEDIUMMXsecurity Register Database PollutionEPSS 0.6%