Vulnerabilities > Moxa

DATE CVE VULNERABILITY TITLE RISK
2023-08-17 CVE-2023-34217 Path Traversal vulnerability in Moxa Tn-4900 Firmware and Tn-5900 Firmware
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.
network
low complexity
moxa CWE-22
8.1
2023-08-17 CVE-2023-33238 Command Injection vulnerability in Moxa Tn-4900 Firmware and Tn-5900 Firmware
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability.
network
low complexity
moxa CWE-77
critical
9.8
2023-08-17 CVE-2023-33239 Command Injection vulnerability in Moxa Tn-4900 Firmware and Tn-5900 Firmware
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability.
network
low complexity
moxa CWE-77
critical
9.8
2023-08-17 CVE-2023-34213 Command Injection vulnerability in Moxa Tn-5900 Firmware 3.1/3.2/3.3
TN-5900 Series firmware versions v3.3 and prior are vulnerable to command-injection vulnerability.
network
low complexity
moxa CWE-77
critical
9.8
2023-08-17 CVE-2023-34214 Command Injection vulnerability in Moxa Tn-4900 Firmware and Tn-5900 Firmware
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability.
network
low complexity
moxa CWE-77
critical
9.8
2023-08-17 CVE-2023-33237 Improper Authentication vulnerability in Moxa Tn-5900 Firmware 3.1/3.2/3.3
TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability.
network
low complexity
moxa CWE-287
8.8
2023-08-16 CVE-2023-4204 Use of Hard-coded Credentials vulnerability in Moxa Nport Iaw5000A-I/O Firmware
NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device.
network
low complexity
moxa CWE-798
critical
9.8
2023-07-05 CVE-2023-3336 Information Exposure Through Discrepancy vulnerability in Moxa Tn-5900 Firmware 3.1
TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability.
network
low complexity
moxa CWE-203
5.3
2023-05-22 CVE-2023-33236 Use of Hard-coded Credentials vulnerability in Moxa Mxsecurity 1.0
MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability.
network
low complexity
moxa CWE-798
critical
9.8
2023-05-22 CVE-2023-33235 Command Injection vulnerability in Moxa Mxsecurity 1.0
MXsecurity version 1.0 is vulnearble to command injection vulnerability.
network
low complexity
moxa CWE-77
8.8