CVE-2021-46560

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage...

Moxa TN-5900 Post Authentication Command Injection

KL-001-2022-002: Moxa TN-5900 Post Authentication Command Injection Vulnerability Title: Moxa TN-5900 Post Authentication Command Injection Vulnerability Advisory ID: KL-001-2022-002 Publication Date: 2022.01.28 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2022-002.txt 1...

Moxa TN-5900 Post Authentication Command Injection Vulnerability

Vulnerability Details Affected Vendor: Moxa Affected Product: TN-5900 Affected Version: v3.1 and prior Platform: Moxa Linux CWE Classification: CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' CVE ID: CVE-2021-46560 2. Vulnerability Description A...

CVE-2021-46560

creationtimestamp| type| source ---|---|--- 2022-01-26 07:19:10+00:00| seen| https://t.me/cibsecurity/36287...

CVE-2021-46560

The CVE-2021-46560 entry concerns Moxa TN-5900 devices (firmware version 3.1 and earlier). A post-authentication command-injection vulnerability exists in the certificate management function web_CERMGMTUpload, allowing an authenticated user to inject OS commands through the cer_pw parameter, whic...