moxa

315 tracked vulnerabilities.

CVE-2023-39981 HIGH
MXsecurity < 1.0.1 - Unauthenticated Information Disclosure via Inadequate Authentication
Sep 02, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-39980 HIGH
MXsecurity < 1.0.1 - SQL Injection
Sep 02, 2023
CVSS 7.1
EPSS 0.00
CVE-2023-39979 CRITICAL
MXsecurity < 1.1.0 - Authentication Bypass via Insufficient Random Values
Sep 02, 2023
CVSS 9.8
EPSS 0.00
CVE-2023-4230 MEDIUM
ioLogik 4000 Series <v1.6 - Info Disclosure
Aug 24, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-4229 MEDIUM
Moxa ioLogik E4200 Firmware < 1.6 - Clickjacking
Aug 24, 2023
CVSS 4.3
EPSS 0.00
CVE-2023-4228 LOW
ioLogik 4000 Series <v1.6 - Info Disclosure
Aug 24, 2023
CVSS 3.1
EPSS 0.00
CVE-2023-4227 MEDIUM
ioLogik 4000 Series <1.6 - Privilege Escalation
Aug 24, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-34217 HIGH
Moxa TN-4900 Firmware < 1.2.4 and TN-5900 Firmware < 3.3 - Arbitrary File Deletion via Certificate-Delete Function
Aug 17, 2023
CVSS 8.1
EPSS 0.00
CVE-2023-34216 HIGH
Moxa TN-4900 Firmware < 1.2.4 and TN-5900 Firmware < 3.3 - Arbitrary File Deletion via Key-Delete Function
Aug 17, 2023
CVSS 8.1
EPSS 0.00
CVE-2023-34215 HIGH
Moxa TN-5900 Firmware < 3.3 - OS Command Injection via Certification-Generation Function
Aug 17, 2023
CVSS 7.2
EPSS 0.00
CVE-2023-34214 HIGH
Moxa TN-4900 and TN-5900 Firmware - OS Command Injection via Certificate Generation Function
Aug 17, 2023
CVSS 7.2
EPSS 0.00
CVE-2023-34213 HIGH
Moxa TN-5900 Firmware < 3.3 - OS Command Injection via Key-Generation Function
Aug 17, 2023
CVSS 8.8
EPSS 0.01
CVE-2023-33239 HIGH
TN-4900/TN-5900 <1.2.4/<3.3 - Command Injection
Aug 17, 2023
CVSS 8.8
EPSS 0.01
CVE-2023-33238 HIGH
TN-4900/TN-5900 <1.2.4/<3.3 - Command Injection
Aug 17, 2023
CVSS 7.2
EPSS 0.00
CVE-2023-33237 HIGH
TN-5900 Series firmware <3.3 - Auth Bypass
Aug 17, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-4204 MEDIUM
NPort IAW5000A-I/O Series <v2.2 - Hardcoded Credential
Aug 16, 2023
CVSS 5.4
EPSS 0.00
CVE-2023-3336 MEDIUM
TN-5900 Series <3.3 - Info Disclosure
Jul 05, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-33236 CRITICAL
MXsecurity 1.0 - Hardcoded Credential Bypass via JWT Token Crafting
May 22, 2023
CVSS 9.8
EPSS 0.00
CVE-2023-33235 HIGH
MXsecurity 1.0 - Authenticated Command Injection via SSH CLI Restricted Shell Bypass
May 22, 2023
CVSS 7.2
EPSS 0.01
CVE-2023-28697 CRITICAL
Moxa MiiNePort E1 - Privilege Escalation
Apr 27, 2023
CVSS 9.8
EPSS 0.01
CVE-2023-1257 HIGH
Moxa UC Series - Privilege Escalation
Mar 07, 2023
CVSS 7.6
EPSS 0.00
CVE-2022-41313 MEDIUM
Moxa SDS-3008 Series < 2.1 - Stored Cross-Site Scripting via switch_contact Form Field
Feb 07, 2023
CVSS 5.4
EPSS 0.02
CVE-2022-41312 MEDIUM
Moxa SDS-3008 Series < 2.1 - Stored Cross-Site Scripting via Switch Description Field
Feb 07, 2023
CVSS 5.4
EPSS 0.01
CVE-2022-41311 MEDIUM
Moxa SDS-3008 Series < 2.1 - Stored Cross-Site Scripting via webLocationMessage_text Form Field
Feb 07, 2023
CVSS 5.4
EPSS 0.01
CVE-2022-40693 HIGH
Moxa SDS-3008 Series < 2.1 - Cleartext Transmission of Sensitive Information via Web Application
Feb 07, 2023
CVSS 7.5
EPSS 0.00