CVE-2024-4740mediumCWE-798

CVE-2024-4740: falha de média gravidade em Moxa MXsecurity Series

MXsecurity Use of Hard-coded Credentials

Publicada em

Seguir esta CVE+ Monitorar MXsecurity Series

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%
MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials. This vulnerability could allow an attacker to tamper with sensitive data.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Moxa · MXsecurity Series
CVEs relacionadas — Moxa MXsecurity Series

No mesmo produto, das mais perigosas para as menos.

CVE-2023-33235HIGHMXsecurity Command Injection VulnerabilityEPSS 1.4%CVE-2023-39979CRITICALMXsecurity Authentication BypassEPSS 1.0%CVE-2023-33236CRITICALMXsecurity Hardcoded Credential VulnerabilityEPSS 1.0%CVE-2023-39981HIGHMXsecurity Device Information DisclosureEPSS 0.8%CVE-2023-39980HIGHMXsecurity Authenticated Information Disclosure Due to SQL InjectionEPSS 0.7%CVE-2023-39983MEDIUMMXsecurity Register Database PollutionEPSS 0.6%