CVE-2023-3336

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.

Score

CVSS 3.1 5.3 Medium

Status

Modified - psirt@moxa.com

Published

2023-07-05

Last modified

2024-11-20

Weaknesses

CWE-203, CWE-204

Affected products

• Tn-5900 (Moxa)
• Tn-5900 Firmware (Moxa)
• Tn-5900 Series (Moxa)

References

• https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230401-tn-5900-series-user-enumeration-vulnerabi…