CVE-2024-4740

MEDIUM

Moxa Mxsecurity < 1.1.0 - Hard-coded Credentials

Title source: rule

Description

MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials. This vulnerability could allow an attacker to tamper with sensitive data.

References (1)

[Vendor Advisory] https://www.moxa.com/en/support/product-support/security-advisory/mpsa-231878-mxsecurity-series-multiple-vulnerabilities

Scores

CVSS v3 5.3

EPSS 0.0030

EPSS Percentile 53.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE

CWE-798

Status published

Affected Products (1)

moxa/mxsecurity < 1.1.0

Timeline

Published Oct 18, 2024

Tracked Since Feb 18, 2026