Vulnerabilities

TI-2023-17053 CVE-2023-34217 · GHSA-9h45-q875-xxrx

Second Order Command-injection Vulnerability in the Certificate-delete Function

LOW 36

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0045 Published 2023-08-17 No fix listed CWE-22

TI-2023-17052 CVE-2023-34216 · GHSA-82xw-m9w4-2cv9

Second Order Command-injection Vulnerability in the Key-delete Function

LOW 36

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00712 Published 2023-08-17 No fix listed CWE-22

TI-2023-17051 CVE-2023-34215 · GHSA-9vgh-rvm2-h9w8

Second Order Command-injection Vulnerability in the Certificate-generation Function

MEDIUM 44

TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00742 Published 2023-08-17 No fix listed CWE-78

TI-2023-17050 CVE-2023-34214 · GHSA-fhvv-xjvf-6vwj

Second Order Command-injection Vulnerability in the Certificate-generation Function

MEDIUM 43

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00443 Published 2023-08-17 No fix listed CWE-78

TI-2023-17049 CVE-2023-34213 · GHSA-xhr8-xhpc-4f2q

Second Order Command-injection Vulnerability in the Key-generation Function

MEDIUM 44

TN-5900 Series firmware versions v3.3 and prior are vulnerable to command-injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00763 Published 2023-08-17 No fix listed CWE-78

TI-2023-16411 CVE-2023-33239 · GHSA-4m3x-2qcv-fh8q

Second Order Command-injection Vulnerability in the Key-generation Function

MEDIUM 46

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01325 Published 2023-08-17 No fix listed CWE-78

TI-2023-16410 CVE-2023-33238 · GHSA-24m3-rcq7-76r2

Command-injection Vulnerability in Certificate Management

MEDIUM 44

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00823 Published 2023-08-17 No fix listed CWE-78

TI-2023-16409 CVE-2023-33237 · GHSA-p33g-779c-ccmq

Authentication Bypass Without Administrator Privilege

MEDIUM 41

TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00628 Published 2023-08-17 No fix listed CWE-863

TI-2023-03121 CVE-2023-3336 · GHSA-78g4-c5r9-6gh7

TN-5900 Series User Enumeration Vulnerability

LOW 31

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00608 Published 2023-07-05 No fix listed CWE-204

TI-2021-21331 CVE-2021-46559 · GHSA-4vj4-c65w-6944

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an…

LOW 33

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00436 Published 2022-01-26 No fix listed CWE-345

TI-2021-21332 CVE-2021-46560 · GHSA-qmgg-g8c3-8959

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.

MEDIUM 48

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03586 Published 2022-01-26 No fix listed CWE-77

Vulnerabilities

Filters