Second Order Command-injection Vulnerability in the Key-generation Function
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.
Summary
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Moxa | TN-5900 Series | 1.0 – 3.3 | — | No fix listed | CNA |
| Moxa | TN-4900 Series | 1.0 – 1.2.4 | — | No fix listed | CNA |
| Moxa | EDR-810 Series | 1.0 – 5.12.27 | — | No fix listed | CNA |
| Moxa | EDR-G902 Series | 1.0 – 5.7.17 | — | No fix listed | CNA |
| Moxa | EDR-G903 Series | 1.0 – 5.7.15 | — | No fix listed | CNA |
| Moxa | EDR-G9010 Series | 1.0 – 2.1 | — | No fix listed | CNA |
| Moxa | NAT-102 Series | 1.0 – 1.0.3 | — | No fix listed | CNA |
- TN-5900 Series VendorMoxa Affected 1.0 – 3.3 Fixed in — No fix listed CNA
- TN-4900 Series VendorMoxa Affected 1.0 – 1.2.4 Fixed in — No fix listed CNA
- EDR-810 Series VendorMoxa Affected 1.0 – 5.12.27 Fixed in — No fix listed CNA
- EDR-G902 Series VendorMoxa Affected 1.0 – 5.7.17 Fixed in — No fix listed CNA
- EDR-G903 Series VendorMoxa Affected 1.0 – 5.7.15 Fixed in — No fix listed CNA
- EDR-G9010 Series VendorMoxa Affected 1.0 – 2.1 Fixed in — No fix listed CNA
- NAT-102 Series VendorMoxa Affected 1.0 – 1.0.3 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:moxa:tn-5900_firmware:*:*:*:*:*:*:*:* | up to 3.3 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:tn-5900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:tn-4900_firmware:*:*:*:*:*:*:*:* | up to 1.2.4 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:tn-4900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
- cpe:2.3:o:moxa:tn-5900_firmware:*:*:*:*:*:*:*:* Versions up to 3.3 Vulnerable ·Moxa
- cpe:2.3:h:moxa:tn-5900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:tn-4900_firmware:*:*:*:*:*:*:*:* Versions up to 1.2.4 Vulnerable ·Moxa
- cpe:2.3:h:moxa:tn-4900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
Remediation
No fixed version listed by the sources yet.
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Moxa EDR-810 Series, EDR-G9010 Series and 5 more products — moxa.com/en/support/product-support/security-advisory/mpsa-…
8 records Highest priority Priority MEDIUM 6 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2023-17051 Second Order Command-injection Vulnerability in the Certificate-generation FunctionPriority MEDIUM 44
- TI-2023-17049 Second Order Command-injection Vulnerability in the Key-generation FunctionPriority MEDIUM 44
- TI-2023-16410 Command-injection Vulnerability in Certificate ManagementPriority MEDIUM 44
Timeline
- 2026-10-02 Threatist record created from CVE-2023-33239
- 2026-10-03 Alias added: GHSA-4m3x-2qcv-fh8q
References
More Moxa Tn-4900 Firmware vulnerabilities
- TI-2023-16410 Command-injection Vulnerability in Certificate Management CVSS 3.1CRITICAL 9.8
- TI-2023-17050 Second Order Command-injection Vulnerability in the Certificate-generation Function CVSS 3.1CRITICAL 9.8
- TI-2023-17053 Second Order Command-injection Vulnerability in the Certificate-delete Function CVSS 3.1HIGH 8.1
- TI-2023-17052 Second Order Command-injection Vulnerability in the Key-delete Function CVSS 3.1HIGH 8.1
Sources
- CVE-2023-33239 · CVE Program
- CVE-2023-33239 · NVD
- FIRST EPSS
- GHSA-4m3x-2qcv-fh8q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences