CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-33237

TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability. This vulnerability arises from inadequate authentication measures implemented in the web API handler, allowing low-privileged APIs to execute restricted actions that only high-privileged APIs are allowed This presents a potential risk of unauthorized exploitation by malicious actors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.2%

CVSS Severity

CVSS v3 Score 8.8

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230402-tn-5900-and-tn-4900-series-web-server-multiple-vulnerabilities
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230402-tn-5900-and-tn-4900-series-web-server-multiple-vulnerabilities

Products affected by CVE-2023-33237

Moxa » Tn-5900 » Version: N/A

cpe:2.3:h:moxa:tn-5900:-
Moxa » Tn-5900 Firmware » Version: N/A

cpe:2.3:o:moxa:tn-5900_firmware:-
Moxa » Tn-5900 Firmware » Version: 3.1

cpe:2.3:o:moxa:tn-5900_firmware:3.1
Moxa » Tn-5900 Firmware » Version: 3.2

cpe:2.3:o:moxa:tn-5900_firmware:3.2
Moxa » Tn-5900 Firmware » Version: 3.3

cpe:2.3:o:moxa:tn-5900_firmware:3.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-33237

Products

Pricing

Contact Us