Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 320

Export CSV
CVE-2023-5962

ioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability

A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Iologik E1210 Iologik E1210 Firmware Iologik E1211 and 17 more
CVE-2023-5627

Incorrect Implementation of Authentication Algorithm Vulnerability

A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Nport 6150 Nport 6150-t Nport 6150-t Firmware and 51 more
CVE-2023-5035

Cookie Without Secure Flag

A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Eds-g503 Eds-g503 Firmware
CVE-2023-4929

NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Nport 5100 Nport 5100a Nport 5100ai M12 and 224 more
CVE-2023-4452

Web Server Buffer Overflow Vulnerability

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Edr-810-2gsfp Edr-810-2gsfp-t Edr-810-2gsfp-t Firmware and 13 more
CVE-2023-4230

ioLogik 4000 Series: Server Banner Information Disclosure

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which has the potential to facilitate the collection of information on ioLogik 4000 Series devices. This vulnerability may enable attackers to gather information for the purpose of assessing vulnerabilities and potential attack vectors.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Iologik 4000 Series Iologik E4200 Iologik E4200 Firmware
CVE-2023-4229

ioLogik 4000 Series: Session Headers Not Implemented

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Iologik E4200 Iologik E4200 Firmware
CVE-2023-4228

ioLogik 4000 Series: Session Cookies Attribute Not Set Properly

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Iologik E4200 Iologik E4200 Firmware
CVE-2023-4227

ioLogik 4000 Series: Existence of an Unauthorized Service

A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which can be exploited by malicious actors to potentially gain unauthorized access to the product. This could lead to security breaches, data theft, and unauthorized manipulation of sensitive information. The vulnerability is attributed to the presence of an unauthorized service, which could potentially enable unauthorized access to the. device.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Iologik 4000 Series Iologik E4200 Iologik E4200 Firmware
CVE-2023-4217

Session cookies attribute not set properly

A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Eds-g503 Eds-g503 Firmware
CVE-2023-4204

NPort IAW5000A-I/O Series Hardcoded Credential Vulnerability

NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate firmware manipulation.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Nport Iaw5000a-i\/o Nport Iaw5000a-i\/o Firmware
CVE-2023-3336

TN-5900 Series User Enumeration Vulnerability

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Tn-5900 Tn-5900 Firmware
CVE-2023-39983

MXsecurity Register Database Pollution

A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Mxsecurity
CVE-2023-39982

MXsecurity Hardcoded Credential

A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle attacks and enable the decryption of SSH traffic.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Mxsecurity
CVE-2023-39981

MXsecurity Device Information Disclosure

A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Mxsecurity
CVE-2023-39980

MXsecurity Authenticated Information Disclosure Due to SQL Injection

A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity versions prior to v1.0.1. This vulnerability arises when special elements are not neutralized correctly, allowing remote attackers to alter SQL commands.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Mxsecurity
CVE-2023-39979

MXsecurity Authentication Bypass

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.  

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Mxsecurity
CVE-2023-34217

Second Order Command-injection Vulnerability in the Certificate-delete Function

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-delete function, which could potentially allow malicious users to delete arbitrary files.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Tn-4900 Tn-4900 Firmware Tn-5900 and 1 more
CVE-2023-34216

Second Order Command-injection Vulnerability in the Key-delete Function

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to delete arbitrary files.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Tn-4900 Tn-4900 Firmware Tn-5900 and 1 more
CVE-2023-34215

Second Order Command-injection Vulnerability in the Certificate-generation Function

TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the certification-generation function, which could potentially allow malicious users to execute remote code on affected devices.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Tn-5900 Tn-5900 Firmware