Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: Moxa Component: Mxsecurity Clear all filters
TI-2024-04413 CVE-2024-4740 · GHSA-cg45-4w7m-qc4v

MXsecurity Use of Hard-coded Credentials

Priority LOW 39

MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00281 Published 2024-10-18 No fix listed CWE-798
TI-2024-04412 CVE-2024-4739 · GHSA-jj92-x469-335w

MXsecurity License Generation Function Disclosure

Priority LOW 39

The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior vulnerable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0035 Published 2024-10-18 No fix listed CWE-749
TI-2023-20875 CVE-2023-39983 · GHSA-5r9f-76wq-x3p4

MXsecurity Register Database Pollution

Priority LOW 31

A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00627 Published 2023-09-02 No fix listed CWE-915
TI-2023-20874 CVE-2023-39982 · GHSA-jvqq-8f3q-54hg

MXsecurity Hardcoded Credential

Priority LOW 39

A vulnerability has been identified in MXsecurity versions prior to v1.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00441 Published 2023-09-02 No fix listed CWE-321
TI-2023-20873 CVE-2023-39981 · GHSA-wmrq-xq49-r4mw

MXsecurity Device Information Disclosure

Priority MEDIUM 40

A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0082 Published 2023-09-02 No fix listed CWE-306
TI-2023-20871 CVE-2023-39979 · GHSA-vv74-p9wh-mpf3

MXsecurity Authentication Bypass

Priority MEDIUM 51

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00982 Published 2023-09-02 No fix listed CWE-334
TI-2023-16408 CVE-2023-33236 · GHSA-r6wg-6486-p79w

MXsecurity Hardcoded Credential Vulnerability

Priority MEDIUM 44

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00973 Published 2023-05-22 No fix listed CWE-798
TI-2023-16407 CVE-2023-33235 · GHSA-cx3c-2jcw-jmfg

MXsecurity Command Injection Vulnerability

Priority MEDIUM 43

MXsecurity version 1.0 is vulnearble to command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01402 Published 2023-05-22 No fix listed CWE-77