CVE-2023-39981

CWE-306 — Missing AuthenticationCWE-287 — Improper Authentication3 documents3 sources
Severity
7.5HIGH
EPSS
0.2%
top 54.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Moxa Mxsecurity SeriesMoxa Mxsecurity
Timeline
PublishedSep 2

Description

A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDmoxa/mxsecurity1.0.1
▶CVEListV5moxa/mxsecurity_series1.0 — 1.0.1

Patches

Patch: www.moxa.com ↗Patch: www.moxa.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-wmrq-xq49-r4mw: A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1↗2023-09-02
▶
CVEList
MXsecurity Device Information Disclosure↗2023-09-02
▶
CVE-2023-39981 (HIGH CVSS 7.5) | A vulnerability that allows for una | cvebase.io