Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2023-34217

Second Order Command-injection Vulnerability in the Certificate-delete Function

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-delete function, which could potentially allow malicious users to delete arbitrary files.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Tn-4900 Tn-4900 Firmware Tn-5900 and 1 more
CVE-2023-34216

Second Order Command-injection Vulnerability in the Key-delete Function

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to delete arbitrary files.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Tn-4900 Tn-4900 Firmware Tn-5900 and 1 more
CVE-2023-34214

Second Order Command-injection Vulnerability in the Certificate-generation Function

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-generation function, which could potentially allow malicious users to execute remote code on affected devices.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Edr-810 Edr-g902 Edr-g903 and 4 more
CVE-2023-33239

Second Order Command-injection Vulnerability in the Key-generation Function

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Moxa
Products
Edr-810 Edr-g9010 Edr-g902 and 6 more
CVE-2023-33238

Command-injection Vulnerability in Certificate Management

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from inadequate input validation in the certificate management function, which could potentially allow malicious users to execute remote code on affected devices.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Edr-810 Edr-g9010 Edr-g902 and 5 more