Moxa

Records329All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical79CVSS 9.0–10.0

CVSS high181CVSS 7.0–8.9

Exploited now

Moxa records in CISA KEV

No Moxa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Awk-3131a Firmware 28 records MEDIUM Edr-810 Firmware 21 records MEDIUM Awk-3121 Firmware 14 records MEDIUM Eds-405a Firmware 13 records MEDIUM Eds-408a Firmware 13 records MEDIUM Mxview 13 records HIGH Tn-5900 Firmware 11 records MEDIUM Eds-510a Firmware 10 records MEDIUM

Records

11 records in Tn-5900 Firmware · all components

TI-2021-21332 CVE-2021-46560 · GHSA-qmgg-g8c3-8959

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.

MEDIUM 48

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03586 Published 2022-01-26 No fix listed CWE-77

TI-2023-16411 CVE-2023-33239 · GHSA-4m3x-2qcv-fh8q

Second Order Command-injection Vulnerability in the Key-generation Function

MEDIUM 46

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01325 Published 2023-08-17 No fix listed CWE-78

TI-2023-17051 CVE-2023-34215 · GHSA-9vgh-rvm2-h9w8

Second Order Command-injection Vulnerability in the Certificate-generation Function

MEDIUM 44

TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00742 Published 2023-08-17 No fix listed CWE-78

TI-2023-17049 CVE-2023-34213 · GHSA-xhr8-xhpc-4f2q

Second Order Command-injection Vulnerability in the Key-generation Function

MEDIUM 44

TN-5900 Series firmware versions v3.3 and prior are vulnerable to command-injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00763 Published 2023-08-17 No fix listed CWE-78

TI-2023-16410 CVE-2023-33238 · GHSA-24m3-rcq7-76r2

Command-injection Vulnerability in Certificate Management

MEDIUM 44

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00823 Published 2023-08-17 No fix listed CWE-78

TI-2023-17050 CVE-2023-34214 · GHSA-fhvv-xjvf-6vwj

Second Order Command-injection Vulnerability in the Certificate-generation Function

MEDIUM 43

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00443 Published 2023-08-17 No fix listed CWE-78

TI-2023-16409 CVE-2023-33237 · GHSA-p33g-779c-ccmq

Authentication Bypass Without Administrator Privilege

MEDIUM 41

TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00628 Published 2023-08-17 No fix listed CWE-863

TI-2023-17053 CVE-2023-34217 · GHSA-9h45-q875-xxrx

Second Order Command-injection Vulnerability in the Certificate-delete Function

LOW 36

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0045 Published 2023-08-17 No fix listed CWE-22

TI-2023-17052 CVE-2023-34216 · GHSA-82xw-m9w4-2cv9

Second Order Command-injection Vulnerability in the Key-delete Function

LOW 36

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00712 Published 2023-08-17 No fix listed CWE-22

TI-2021-21331 CVE-2021-46559 · GHSA-4vj4-c65w-6944

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an…

LOW 33

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00436 Published 2022-01-26 No fix listed CWE-345

TI-2023-03121 CVE-2023-3336 · GHSA-78g4-c5r9-6gh7

TN-5900 Series User Enumeration Vulnerability

LOW 31

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00608 Published 2023-07-05 No fix listed CWE-204

Open these records in search →

Critical	79
High	181
Medium	66
Low	2
No CVSS	1