CVE-2023-33239
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - psirt@moxa.com
- Published
- 2023-08-17
- Last modified
- 2024-10-28
- Weaknesses
- CWE-77, CWE-78
Affected products
- Edr-810 (Moxa)
- Edr-810 Series (Moxa)
- Edr-g9010 (Moxa)
- Edr-g9010 Series (Moxa)
- Edr-g902 (Moxa)
- Edr-g902 Series (Moxa)
- Edr-g903 (Moxa)
- Edr-g903 Series (Moxa)
- Nat-102 (Moxa)
- Nat-102 Series (Moxa)
- Tn-4900 (Moxa)
- Tn-4900 Firmware (Moxa)
- Tn-4900 Series (Moxa)
- Tn-5900 (Moxa)
- Tn-5900 Firmware (Moxa)
- Tn-5900 Series (Moxa)
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230402-tn-5900-and-tn-4900-series-web-server-mul…
