Vulnerability Details CVE-2023-1257
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.0%
CVSS Severity
CVSS v3 Score 7.6
Products affected by CVE-2023-1257
-
cpe:2.3:h:moxa:uc-2101-lx:-
-
cpe:2.3:h:moxa:uc-2102-lx:-
-
cpe:2.3:h:moxa:uc-2102-t-lx:-
-
cpe:2.3:h:moxa:uc-2104-lx:-
-
cpe:2.3:h:moxa:uc-2111-lx:-
-
cpe:2.3:h:moxa:uc-2112-lx:-
-
cpe:2.3:h:moxa:uc-2114-t-lx:-
-
cpe:2.3:h:moxa:uc-2116-t-lx:-
-
cpe:2.3:h:moxa:uc-3101-t-ap-lx:-
-
cpe:2.3:h:moxa:uc-3101-t-eu-lx:-
-
cpe:2.3:h:moxa:uc-3101-t-us-lx:-
-
cpe:2.3:h:moxa:uc-3111-t-ap-lx-nw:-
-
cpe:2.3:h:moxa:uc-3111-t-ap-lx:-
-
cpe:2.3:h:moxa:uc-3111-t-eu-lx-nw:-
-
cpe:2.3:h:moxa:uc-3111-t-eu-lx:-
-
cpe:2.3:h:moxa:uc-3111-t-us-lx-nw:-
-
cpe:2.3:h:moxa:uc-3111-t-us-lx:-
-
cpe:2.3:h:moxa:uc-3121-t-ap-lx:-
-
cpe:2.3:h:moxa:uc-3121-t-eu-lx:-
-
cpe:2.3:h:moxa:uc-3121-t-us-lx:-
-
cpe:2.3:h:moxa:uc-5101-lx:-
-
cpe:2.3:h:moxa:uc-5101-t-lx:-
-
cpe:2.3:h:moxa:uc-5102-lx:-
-
cpe:2.3:h:moxa:uc-5102-t-lx:-
-
cpe:2.3:h:moxa:uc-5111-lx:-
-
cpe:2.3:h:moxa:uc-5111-t-lx:-
-
cpe:2.3:h:moxa:uc-5112-lx:-
-
cpe:2.3:h:moxa:uc-5112-t-lx:-
-
cpe:2.3:h:moxa:uc-8112-lx:-
-
cpe:2.3:h:moxa:uc-8112-me-t-lx1:-
-
cpe:2.3:h:moxa:uc-8112-me-t-lx:-
-
cpe:2.3:h:moxa:uc-8112a-me-t-lx:-
-
cpe:2.3:h:moxa:uc-8131-lx:-
-
cpe:2.3:h:moxa:uc-8132-lx:-
-
cpe:2.3:h:moxa:uc-8162-lx:-
-
cpe:2.3:h:moxa:uc-8210-t-lx-s:-
-
cpe:2.3:h:moxa:uc-8220-t-lx-ap-s:-
-
cpe:2.3:h:moxa:uc-8220-t-lx-eu-s:-
-
cpe:2.3:h:moxa:uc-8220-t-lx-s:-
-
cpe:2.3:h:moxa:uc-8220-t-lx-us-s:-
-
cpe:2.3:h:moxa:uc-8220-t-lx:-
-
cpe:2.3:h:moxa:uc-8410a-lx:-
-
cpe:2.3:h:moxa:uc-8410a-nw-lx:-
-
cpe:2.3:h:moxa:uc-8410a-nw-t-lx:-
-
cpe:2.3:h:moxa:uc-8410a-t-lx:-
-
cpe:2.3:h:moxa:uc-8540-lx:-
-
cpe:2.3:h:moxa:uc-8540-t-ct-lx:-
-
cpe:2.3:h:moxa:uc-8540-t-lx:-
-
cpe:2.3:h:moxa:uc-8580-lx:-
-
cpe:2.3:h:moxa:uc-8580-q-lx:-
-
cpe:2.3:h:moxa:uc-8580-t-ct-lx:-
-
cpe:2.3:h:moxa:uc-8580-t-ct-q-lx:-
-
cpe:2.3:h:moxa:uc-8580-t-lx:-
-
cpe:2.3:h:moxa:uc-8580-t-q-lx:-
-
cpe:2.3:o:moxa:uc-2101-lx_firmware:1.3
-
cpe:2.3:o:moxa:uc-2101-lx_firmware:1.5
-
cpe:2.3:o:moxa:uc-2102-lx_firmware:1.3
-
cpe:2.3:o:moxa:uc-2102-lx_firmware:1.5
-
cpe:2.3:o:moxa:uc-2102-t-lx_firmware:1.3
-
cpe:2.3:o:moxa:uc-2102-t-lx_firmware:1.5
-
cpe:2.3:o:moxa:uc-2104-lx_firmware:1.3
-
cpe:2.3:o:moxa:uc-2104-lx_firmware:1.5
-
cpe:2.3:o:moxa:uc-2111-lx_firmware:1.3
-
cpe:2.3:o:moxa:uc-2111-lx_firmware:1.5
-
cpe:2.3:o:moxa:uc-2112-lx_firmware:1.3
-
cpe:2.3:o:moxa:uc-2112-lx_firmware:1.5
-
cpe:2.3:o:moxa:uc-2114-t-lx_firmware:-
-
cpe:2.3:o:moxa:uc-2114-t-lx_firmware:1.3
-
cpe:2.3:o:moxa:uc-2114-t-lx_firmware:1.5
-
cpe:2.3:o:moxa:uc-2116-t-lx_firmware:1.3
-
cpe:2.3:o:moxa:uc-2116-t-lx_firmware:1.5
-
cpe:2.3:o:moxa:uc-3101-t-ap-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-3101-t-ap-lx_firmware:1.6
-
cpe:2.3:o:moxa:uc-3101-t-ap-lx_firmware:2.0
-
cpe:2.3:o:moxa:uc-3101-t-eu-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-3101-t-eu-lx_firmware:1.6
-
cpe:2.3:o:moxa:uc-3101-t-eu-lx_firmware:2.0
-
cpe:2.3:o:moxa:uc-3101-t-us-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-3101-t-us-lx_firmware:1.6
-
cpe:2.3:o:moxa:uc-3101-t-us-lx_firmware:2.0
-
cpe:2.3:o:moxa:uc-3111-t-ap-lx-nw_firmware:1.2
-
cpe:2.3:o:moxa:uc-3111-t-ap-lx-nw_firmware:1.6
-
cpe:2.3:o:moxa:uc-3111-t-ap-lx-nw_firmware:2.0
-
cpe:2.3:o:moxa:uc-3111-t-ap-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-3111-t-ap-lx_firmware:1.6
-
cpe:2.3:o:moxa:uc-3111-t-ap-lx_firmware:2.0
-
cpe:2.3:o:moxa:uc-3111-t-eu-lx-nw_firmware:1.2
-
cpe:2.3:o:moxa:uc-3111-t-eu-lx-nw_firmware:1.6
-
cpe:2.3:o:moxa:uc-3111-t-eu-lx-nw_firmware:2.0
-
cpe:2.3:o:moxa:uc-3111-t-eu-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-3111-t-eu-lx_firmware:1.6
-
cpe:2.3:o:moxa:uc-3111-t-eu-lx_firmware:2.0
-
cpe:2.3:o:moxa:uc-3111-t-us-lx-nw_firmware:1.2
-
cpe:2.3:o:moxa:uc-3111-t-us-lx-nw_firmware:1.6
-
cpe:2.3:o:moxa:uc-3111-t-us-lx-nw_firmware:2.0
-
cpe:2.3:o:moxa:uc-3111-t-us-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-3111-t-us-lx_firmware:1.6
-
cpe:2.3:o:moxa:uc-3111-t-us-lx_firmware:2.0
-
cpe:2.3:o:moxa:uc-3121-t-ap-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-3121-t-ap-lx_firmware:1.6
-
cpe:2.3:o:moxa:uc-3121-t-ap-lx_firmware:2.0
-
cpe:2.3:o:moxa:uc-3121-t-eu-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-3121-t-eu-lx_firmware:1.6
-
cpe:2.3:o:moxa:uc-3121-t-eu-lx_firmware:2.0
-
cpe:2.3:o:moxa:uc-3121-t-us-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-3121-t-us-lx_firmware:1.6
-
cpe:2.3:o:moxa:uc-3121-t-us-lx_firmware:2.0
-
cpe:2.3:o:moxa:uc-5101-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-5101-t-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-5102-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-5102-t-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-5111-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-5111-t-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-5112-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-5112-t-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-8112-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-8112-me-t-lx1_firmware:1.0
-
cpe:2.3:o:moxa:uc-8112-me-t-lx1_firmware:1.1
-
cpe:2.3:o:moxa:uc-8112-me-t-lx_firmware:1.0
-
cpe:2.3:o:moxa:uc-8112-me-t-lx_firmware:1.1
-
cpe:2.3:o:moxa:uc-8112a-me-t-lx_firmware:1.0
-
cpe:2.3:o:moxa:uc-8112a-me-t-lx_firmware:1.1
-
cpe:2.3:o:moxa:uc-8131-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-8132-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-8162-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-8210-t-lx-s_firmware:1.0
-
cpe:2.3:o:moxa:uc-8210-t-lx-s_firmware:2.4
-
cpe:2.3:o:moxa:uc-8220-t-lx-ap-s_firmware:1.0
-
cpe:2.3:o:moxa:uc-8220-t-lx-ap-s_firmware:2.4
-
cpe:2.3:o:moxa:uc-8220-t-lx-eu-s_firmware:1.0
-
cpe:2.3:o:moxa:uc-8220-t-lx-eu-s_firmware:2.4
-
cpe:2.3:o:moxa:uc-8220-t-lx-s_firmware:1.0
-
cpe:2.3:o:moxa:uc-8220-t-lx-s_firmware:2.4
-
cpe:2.3:o:moxa:uc-8220-t-lx-us-s_firmware:1.0
-
cpe:2.3:o:moxa:uc-8220-t-lx-us-s_firmware:2.4
-
cpe:2.3:o:moxa:uc-8220-t-lx_firmware:1.0
-
cpe:2.3:o:moxa:uc-8220-t-lx_firmware:2.4
-
cpe:2.3:o:moxa:uc-8410a-lx_firmware:2.2
-
cpe:2.3:o:moxa:uc-8410a-nw-lx_firmware:2.2
-
cpe:2.3:o:moxa:uc-8410a-nw-t-lx_firmware:2.2
-
cpe:2.3:o:moxa:uc-8410a-t-lx_firmware:2.2
-
cpe:2.3:o:moxa:uc-8540-lx_firmware:1.0
-
cpe:2.3:o:moxa:uc-8540-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-8540-t-ct-lx_firmware:1.0
-
cpe:2.3:o:moxa:uc-8540-t-ct-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-8540-t-lx_firmware:1.0
-
cpe:2.3:o:moxa:uc-8540-t-lx_firmware:1.2
-
cpe:2.3:o:moxa:uc-8580-lx_firmware:1.1
-
cpe:2.3:o:moxa:uc-8580-q-lx_firmware:1.1
-
cpe:2.3:o:moxa:uc-8580-t-ct-lx_firmware:1.1
-
cpe:2.3:o:moxa:uc-8580-t-ct-q-lx_firmware:1.1
-
cpe:2.3:o:moxa:uc-8580-t-lx_firmware:1.1
-
cpe:2.3:o:moxa:uc-8580-t-q-lx_firmware:1.1