CRITICAL🇵🇱 Wersja polska

CVE-2023-28697

CVSS 9.8v3.1pub. 2023-04-27upd. 2024-11-21

Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Moxa Miineport E1

    HW
    Moxa
    all versions

  • Moxa Miineport E1 Firmware

    OS
    Moxa
    1.7.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2016-9344HIGH7.5same product

An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions ...

CVE-2016-9346MEDIUM5.3same product

An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions ...

CVE-2023-39979CRITICAL9.8PL ✓same vendor

Podatność Auth Bypass w Moxa MXsecurity — niewystarczająca losowość uwierzytelnienia

CVE-2023-33236CRITICAL9.8PL ✓same vendor

Moxa MXsecurity – hardcoded credentials umożliwiające bypass uwierzytelnienia

CVE-2021-40390CRITICAL9.8PL ✓same vendor

Pominięcie uwierzytelnienia w Moxa MXView Series — nieautoryzowany dostęp