Unauthenticated Remote Command Execution in Mobatek MobaXterm
CVE-2017-15376

9.8CRITICAL

Key Information:

Vendor

Mobatek

Status
Mobaxterm
Vendor
CVE Published:
3 October 2022

What is CVE-2017-15376?

The TELNET service in Mobatek MobaXterm version 10.4 is vulnerable due to a lack of authentication. This oversight permits remote attackers to connect through TCP port 23 and execute arbitrary commands on the targeted system, potentially compromising the integrity and security of affected environments.

References

https://www.vulnerability-lab.com/get_content.php?id=2097
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-15376 : Unauthenticated Remote Command Execution in Mobatek MobaXterm