CVE-2024-6787

This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it is used (TOCTOU). By exploiting this race condition, an attacker can write arbitrary files to the system. This could allow the attacker to execute malicious code and potentially cause file losses.

Score

CVSS 4.0 6.0 Medium

Status

Analyzed - psirt@moxa.com

Published

2024-09-21

Last modified

2024-09-26

Weaknesses

CWE-367

Affected products

• Mxview One (Moxa)
• Mxview One Series (Moxa)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05
• https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-an…