Read the docs

Moxa

Records329All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical79CVSS 9.0–10.0
CVSS high181CVSS 7.0–8.9

Exploited now

Moxa records in CISA KEV

No Moxa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Awk-3131a Firmware 28 records MEDIUM Edr-810 Firmware 21 records MEDIUM Awk-3121 Firmware 14 records MEDIUM Eds-405a Firmware 13 records MEDIUM Eds-408a Firmware 13 records MEDIUM Mxview 13 records HIGH Tn-5900 Firmware 11 records MEDIUM Eds-510a Firmware 10 records MEDIUM

Records

9 records in Mxsecurity · all components

TI-2023-20871 CVE-2023-39979 · GHSA-vv74-p9wh-mpf3

MXsecurity Authentication Bypass

Priority MEDIUM 51

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00982 Published 2023-09-02 No fix listed CWE-334
TI-2023-16408 CVE-2023-33236 · GHSA-r6wg-6486-p79w

MXsecurity Hardcoded Credential Vulnerability

Priority MEDIUM 44

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00973 Published 2023-05-22 No fix listed CWE-798
TI-2023-16407 CVE-2023-33235 · GHSA-cx3c-2jcw-jmfg

MXsecurity Command Injection Vulnerability

Priority MEDIUM 43

MXsecurity version 1.0 is vulnearble to command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01402 Published 2023-05-22 No fix listed CWE-77
TI-2023-20873 CVE-2023-39981 · GHSA-wmrq-xq49-r4mw

MXsecurity Device Information Disclosure

Priority MEDIUM 40

A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0082 Published 2023-09-02 No fix listed CWE-306
TI-2024-04413 CVE-2024-4740 · GHSA-cg45-4w7m-qc4v

MXsecurity Use of Hard-coded Credentials

Priority LOW 39

MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00281 Published 2024-10-18 No fix listed CWE-798
TI-2024-04412 CVE-2024-4739 · GHSA-jj92-x469-335w

MXsecurity License Generation Function Disclosure

Priority LOW 39

The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior vulnerable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0035 Published 2024-10-18 No fix listed CWE-749
TI-2023-20874 CVE-2023-39982 · GHSA-jvqq-8f3q-54hg

MXsecurity Hardcoded Credential

Priority LOW 39

A vulnerability has been identified in MXsecurity versions prior to v1.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00441 Published 2023-09-02 No fix listed CWE-321
TI-2023-20875 CVE-2023-39983 · GHSA-5r9f-76wq-x3p4

MXsecurity Register Database Pollution

Priority LOW 31

A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00627 Published 2023-09-02 No fix listed CWE-915
Open these records in search →