PT-2022-5628 · Moxa · Moxa Tn-5916 Series

Name of the Vulnerable Software and Affected Versions: Moxa TN-5916 series affected versions not specified Description: The issue is related to a potential modification of a cookie file in the Moxa TN-5916 series router's firmware. This could allow a remote attacker to elevate their privileges...

The vulnerability of the command interpreter in Moxa’s TN-5916 microprogrammed router web service allows a hacker to execute arbitrary code.

The vulnerability of the command interpreter in Moxa’s TN-5916 microprogrammed router service software is related to errors during the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PT-2022-5605 · Moxa · Moxa Edr-G903 +3

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 versions affected versions not specified Moxa EDR-G902 versions affected versions not specified Moxa EDR-G903 versions affected versions not specified Moxa TN-4900 versions affected versions not specified Description: The issue i...

PT-2022-5604 · Moxa · Moxa Tn-5916 Series

Name of the Vulnerable Software and Affected Versions: Moxa TN-5916 series firmware affected versions not specified Description: The issue is related to errors in the authentication procedure of the web service command interpreter in the Moxa TN-5916 series router firmware. This could allow a...

labour.tn.gov.in Cross Site Scripting vulnerability OBB-2980717

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

labour.tn.gov.in Cross Site Scripting vulnerability OBB-2915442

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

new packages: hunspell-tn

An update is available for hunspell-tn. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

CVE-2021-46082

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to contain a memory leak which allows attackers to cause a Denial of Service DoS via crafted packets...

Moxa Tn-5900 安全漏洞

Moxa Tn-5900 is a series of En50155 wall mount routers from Moxa in China. A security vulnerability exists in several Moxa products, which stems from the discovery of a memory leak that allows an attacker to cause a denial of service DoS via a crafted packet...

The vulnerability of Moxa EN50155 TN-5900 series router microprogramming software, related to the lack of measures taken for data cleaning at the management level, allows attackers to introduce malicious code.

The vulnerability of Moxa EN50155 TN-5900 series router microprogramming software is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability can allow a malicious actor to inject malicious code remotely...

The vulnerability of the Moxa EN50155 TN-5900 series router’s microprogramming software, related to a memory release error, allows a intruder to trigger a service failure.

The vulnerability of the Moxa EN50155 TN-5900 series router’s microprogramming software is related to a memory release error. Exploiting this vulnerability can allow an attacker to cause service failure remotely...

The vulnerability of the Moxa EN50155 TN-5900 series router’s microprogramming software, due to deficiencies in the cryptographic algorithms used, allows attackers to compromise data integrity.

The vulnerability of the Moxa EN50155 TN-5900 series router microprogramming software is related to deficiencies in the cryptographic algorithms used. Exploiting this vulnerability can allow a malicious actor to compromise data integrity from a remote location...

Moxa TN-5900 Firmware Upgrade Checksum Validation

KL-001-2022-001: Moxa TN-5900 Firmware Upgrade Checksum Validation Vulnerability Title: Moxa TN-5900 Firmware Upgrade Checksum Validation Vulnerability Advisory ID: KL-001-2022-001 Publication Date: 2022.01.28 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2022-001.txt 1...

Moxa TN-5900 Firmware Upgrade Checksum Validation Exploit

Moxa TN-5900 versions 3.1.0 and below use an insecure method to validate firmware updates. A malicious user with access to the management interface can upload arbitrary code in a crafted Title: Moxa TN-5900 Firmware Upgrade Checksum Validation Vulnerability Publication URL:...

Moxa TN-5900 Post Authentication Command Injection

KL-001-2022-002: Moxa TN-5900 Post Authentication Command Injection Vulnerability Title: Moxa TN-5900 Post Authentication Command Injection Vulnerability Advisory ID: KL-001-2022-002 Publication Date: 2022.01.28 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2022-002.txt 1...

Moxa TN-5900 Firmware Post Authentication Command Injection Exploit

Moxa TN-5900 versions 3.1 and below suffer from an issue where a user who has authenticated to the management web application is able to leverage a command injection vulnerability in the p12 processing code of the certificate management function webCERMGMTUpload. Title: Moxa TN-5900 Post...

Moxa TN-5900 Command Injection Vulnerability

Moxa Tn-5900 is a series of En50155 wall-mounted routers from Moxa, China.A command injection vulnerability exists in Moxa TN-5900, which is caused when the network system or product fails to properly filter special characters, commands, etc. during the execution of commands entered by the user. ...

Moxa TN-5900 Post Authentication Command Injection Vulnerability

Vulnerability Details Affected Vendor: Moxa Affected Product: TN-5900 Affected Version: v3.1 and prior Platform: Moxa Linux CWE Classification: CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' CVE ID: CVE-2021-46560 2. Vulnerability Description A...

Moxa TN-5900 Firmware Upgrade Checksum Validation Vulnerability

Vulnerability Details Affected Vendor: Moxa Affected Product: TN-5900 Affected Version: v3.1 and prior Platform: Moxa Linux CWE Classification: CWE-354 Improper Validation of Integrity Check Value CVE ID: CVE-2021-46559 2. Vulnerability Description Moxa TN-5900 v3.1.0 and prior uses an insecure...

CVE-2021-46559

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection...