CVE-2023-39983mediumCWE-915

CVE-2023-39983: falha de média gravidade em Moxa MXsecurity Series

MXsecurity Register Database Pollution

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar MXsecurity Series

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.6%
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Moxa · MXsecurity Series
CVEs relacionadas — Moxa MXsecurity Series

No mesmo produto, das mais perigosas para as menos.

CVE-2023-33235HIGHMXsecurity Command Injection VulnerabilityEPSS 1.4%CVE-2023-39979CRITICALMXsecurity Authentication BypassEPSS 1.0%CVE-2023-33236CRITICALMXsecurity Hardcoded Credential VulnerabilityEPSS 1.0%CVE-2023-39981HIGHMXsecurity Device Information DisclosureEPSS 0.8%CVE-2023-39980HIGHMXsecurity Authenticated Information Disclosure Due to SQL InjectionEPSS 0.7%CVE-2023-39982HIGHMXsecurity Hardcoded CredentialEPSS 0.4%