CVE-2023-39982: A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications…

PriorityP430medium5.9CVSS 3.1

AVNACHPRNUINSUCHINAN

EPSS

0.37%

29.0th percentile

A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle attacks and enable the decryption of SSH traffic.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
moxa	mxsecurity	<= 1.0.1	—
moxa	mxsecurity_series	1.0 – 1.0.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.