Mxsecurity
CVE-2023-39982
MEDIUM
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionNVD
A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle attacks and enable the decryption of SSH traffic.
AnalysisAI
A vulnerability has been identified in MXsecurity versions prior to v1.0.1. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.
Technical ContextAI
This vulnerability is classified under CWE-321. A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle attacks and enable the decryption of SSH traffic. Affected products include: Moxa Mxsecurity.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Mxsecurity
View allThere is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. Rated cri
MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. Rated critical severity (CVSS 9.8), this vul
MXsecurity version 1.0 is vulnearble to command injection vulnerability. Rated high severity (CVSS 8.8), this vulnerabil
A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity v
MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials. Rated high se
The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior
A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. Rated hi
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been iden
Same weakness CWE-321 – Use of Hard-coded Cryptographic Key
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today