Moxa MXsecurity Series Hard-coded JWT Key Authentication Bypass (CVE-2023-33236)

Binary data moxamxsecuritycve-2023-33236.nbin...

CVE-2023-33236

creationtimestamp| type| source ---|---|--- 2023-05-22 12:25:37+00:00| seen| https://t.me/cibsecurity/64512 2023-06-02 12:45:05+00:00| seen| https://t.me/truesecator/4456 2025-01-21 22:01:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2486...

CVE-2023-33236

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs...

CVE-2023-33236

CVE-2023-33236 affects Moxa MXsecurity Series software v1.0, where a vulnerability involving hard-coded credentials could be exploited to craft arbitrary JWT tokens and bypass authentication for web-based APIs. The issue enables remote exploitation with low attack complexity and no user interacti...

CVE-2023-33236 MXsecurity Hardcoded Credential Vulnerability

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs...