CVE-2023-39979
Assigner: Moxa
Published: 2023-09-02T12:05:48.829Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: MXsecurity Series
vendor: Moxa
versions: lessThanOrEqual: 1.0.1
status: affected
version: 1.0
versionType: custom
descriptions: supportingMedia: base64: no
type: text/html
value: <p>There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.&nbsp;&nbsp;</p>
value: There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.  


impacts: capecId: CAPEC-112
descriptions: value: CAPEC-112: Brute Force
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-334
description: CWE-334: Small Space of Random Values
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: Moxa has developed appropriate solution to address the vulnerability. The solution for affected product is shown below.<br><ul><li>MXsecurity: Please upgrade to software v1.1.0 or higher.</li></ul>
value: Moxa has developed appropriate solution to address the vulnerability. The solution for affected product is shown below.
  *  MXsecurity: Please upgrade to software v1.1.0 or higher.



source: discovery: EXTERNAL
title: MXsecurity Authentication Bypass
x_generator: engine: Vulnogram 0.1.0-dev