MXsecurity Authentication Bypass
CVE-2023-39979

9.8CRITICAL

Key Information:

Vendor
Moxa
Status
Mxsecurity Series
Vendor
CVE Published:
2 September 2023

Summary

A vulnerability exists in MXsecurity versions prior to 1.0.1, allowing remote attackers to bypass authentication mechanisms due to inadequate randomness in the web service authenticator. This weakness can potentially enable unauthorized access to the system, exposing sensitive data and functionalities. It is crucial for users of affected versions to apply the latest updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

MXsecurity Series 1.0 <= 1.0.1

References

https://www.moxa.com/en/support/product-support/security-...
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.