Second Order Command-injection Vulnerability in the Key-delete Function
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to delete arbitrary files.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Moxa | TN-5900 Series | 1.0 – 3.3 | — | No fix listed | CNA |
| Moxa | TN-4900 Series | 1.0 – 1.2.4 | — | No fix listed | CNA |
| Moxa | EDR-G902 Series | 1.0 – 5.7.17 | — | No fix listed | CNA |
| Moxa | EDR-G903 Series | 1.0 – 5.7.15 | — | No fix listed | CNA |
| Moxa | EDR-G9010 Series | 1.0 – 2.1 | — | No fix listed | CNA |
| Moxa | NAT-102 Series | 1.0 – 1.0.3 | — | No fix listed | CNA |
- TN-5900 Series VendorMoxa Affected 1.0 – 3.3 Fixed in — No fix listed CNA
- TN-4900 Series VendorMoxa Affected 1.0 – 1.2.4 Fixed in — No fix listed CNA
- EDR-G902 Series VendorMoxa Affected 1.0 – 5.7.17 Fixed in — No fix listed CNA
- EDR-G903 Series VendorMoxa Affected 1.0 – 5.7.15 Fixed in — No fix listed CNA
- EDR-G9010 Series VendorMoxa Affected 1.0 – 2.1 Fixed in — No fix listed CNA
- NAT-102 Series VendorMoxa Affected 1.0 – 1.0.3 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:moxa:tn-5900_firmware:*:*:*:*:*:*:*:* | up to 3.3 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:tn-5900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
| cpe:2.3:o:moxa:tn-4900_firmware:*:*:*:*:*:*:*:* | up to 1.2.4 | Vulnerable | Moxa |
| cpe:2.3:h:moxa:tn-4900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Moxa |
- cpe:2.3:o:moxa:tn-5900_firmware:*:*:*:*:*:*:*:* Versions up to 3.3 Vulnerable ·Moxa
- cpe:2.3:h:moxa:tn-5900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
- cpe:2.3:o:moxa:tn-4900_firmware:*:*:*:*:*:*:*:* Versions up to 1.2.4 Vulnerable ·Moxa
- cpe:2.3:h:moxa:tn-4900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Moxa
Remediation
No fixed version listed by the sources yet.
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Moxa EDR-G9010 Series, EDR-G902 Series and 4 more products — moxa.com/en/support/product-support/security-advisory/mpsa-…
8 records Highest priority Priority MEDIUM 6 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2023-16411 Second Order Command-injection Vulnerability in the Key-generation FunctionPriority MEDIUM 46
- TI-2023-17051 Second Order Command-injection Vulnerability in the Certificate-generation FunctionPriority MEDIUM 44
- TI-2023-17049 Second Order Command-injection Vulnerability in the Key-generation FunctionPriority MEDIUM 44
Timeline
- 2026-10-02 Threatist record created from CVE-2023-34216
- 2026-10-03 Alias added: GHSA-82xw-m9w4-2cv9
References
More Moxa Tn-4900 Firmware vulnerabilities
- TI-2023-16411 Second Order Command-injection Vulnerability in the Key-generation Function CVSS 3.1CRITICAL 9.8
- TI-2023-16410 Command-injection Vulnerability in Certificate Management CVSS 3.1CRITICAL 9.8
- TI-2023-17050 Second Order Command-injection Vulnerability in the Certificate-generation Function CVSS 3.1CRITICAL 9.8
- TI-2023-17053 Second Order Command-injection Vulnerability in the Certificate-delete Function CVSS 3.1HIGH 8.1
Sources
- CVE-2023-34216 · CVE Program
- CVE-2023-34216 · NVD
- FIRST EPSS
- GHSA-82xw-m9w4-2cv9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences