Lucene search
+L

155 matches found

CNNVD
CNNVD
added 2023/08/17 12:0 a.m.9 views

MOXA TN-5900 授权问题漏洞

MOXA TN-5900 is a series of industrial firewall routers from China MOXA. An authentication error vulnerability exists in the MOXA TN-5900 prior to version v3.3, which stems from insufficient authentication measures implemented in the Web API handler, and can be exploited by an attacker to cause a...

8.8CVSS6.9AI score0.00521EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/17 12:0 a.m.4 views

MOXA TN-4900 命令注入漏洞

MOXA TN-4900 is a series of industrial firewall routers from MOXA, China.MOXA TN-5900 is a series of industrial firewall routers from MOXA, China. A command injection vulnerability exists in the MOXA TN-4900 and TN-5900, which can be exploited by an attacker to execute remote code on an affected...

9.8CVSS8.3AI score0.00371EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/17 12:0 a.m.7 views

MOXA TN-5900 命令注入漏洞

MOXA TN-5900 is a series of industrial firewall routers from China MOXA. The MOXA TN-5900 suffers from a command injection vulnerability that can be exploited by an attacker to execute remote code on an affected device...

9.8CVSS8.4AI score0.00621EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/17 12:0 a.m.5 views

MOXA TN-4900 路径遍历漏洞

MOXA TN-4900 is a series of industrial firewall routers from MOXA, China.MOXA TN-5900 is a series of industrial firewall routers from MOXA, China. A command injection vulnerability exists in the MOXA TN-4900 and TN-5900, which can be exploited by an attacker to delete arbitrary files...

8.1CVSS7.6AI score0.00377EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/16 12:0 a.m.10 views

PT-2023-4389 · Moxa · Moxa Tn-5900 Series

Name of the Vulnerable Software and Affected Versions: Moxa TN-5900 Series firmware version v3.3 and prior Description: The issue is related to improper authentication in the web API handler of the Moxa TN-5900 Series firmware, allowing low-privileged APIs to execute restricted actions. This...

9CVSS7.6AI score0.00521EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/08/16 12:0 a.m.13 views

PT-2023-4620 · Moxa · Moxa Tn-5900 Series +1

Name of the Vulnerable Software and Affected Versions: Moxa TN-4900 Series firmware versions v1.2.4 and prior Moxa TN-5900 Series firmware versions v3.3 and prior Description: The issue stems from insufficient input validation in the key-generation function, which could potentially allow maliciou...

10CVSS8.1AI score0.01132EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2023/08/02 12:0 a.m.27 views

Moxa TN-5900 and MGate Gateways Missing Release of Memory after Effective Lifetime (CVE-2021-46082)

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to contain a memory leak which allows attackers to cause a Denial of Service DoS via crafted packets. This plugin only works with Tenable.ot. Please visi...

7.8CVSS7.4AI score0.01175EPSS
SaveExploits0References3
CNVD
CNVD
added 2023/07/07 12:0 a.m.49 views

Moxa Tn-5900 User Enumeration Vulnerability

Moxa Tn-5900 is a series of En50155 wall mount routers from China's Moxa MOXA. The Moxa Tn-5900 suffers from a user enumeration vulnerability, which can be exploited by an attacker to determine if a user is valid during password recovery via the web login page, and to conduct a brute force attack...

5.3CVSS6.9AI score0.00608EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/05 10:15 a.m.37 views

CVE-2023-3336

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users...

5.3CVSS5.3AI score0.00608EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/07/05 9:11 a.m.35 views

CVE-2023-3336 TN-5900 Series User Enumeration Vulnerability

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users...

5.3CVSS5.7AI score0.00608EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/05 9:11 a.m.46 views

CVE-2023-3336

TN-5900 Series (version 3.3 and earlier) is affected by a user enumeration vulnerability that could allow a remote attacker to determine whether a user is valid during password recovery via the web login page, potentially enabling brute-force attempts with valid accounts. Multiple sources (CVE-20...

5.3CVSS5.3AI score0.00608EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/05 9:11 a.m.20 views

CVE-2023-3336 TN-5900 Series User Enumeration Vulnerability

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users...

5.3CVSS7.1AI score0.00608EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/05 12:0 a.m.13 views

Moxa Tn-5900 安全漏洞

Moxa Tn-5900 is a series of En50155 wall mount routers from China's Moxa MOXA. The Moxa Tn-5900 suffers from a user enumeration vulnerability, which can be exploited by an attacker to determine if a user is valid during password recovery via the web login page, and to conduct a brute force attack...

5.3CVSS6.8AI score0.00608EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/04 12:0 a.m.11 views

The vulnerability of Moxa TN-5900 series router microprogramming software, related to inconsistencies in responses to incoming requests, allows attackers to gain unauthorized access to protected information.

The vulnerability of Moxa TN-5900 series router microprogramming software is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7.8CVSS5.9AI score0.00608EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/31 12:0 a.m.6 views

PT-2023-4508 · Moxa · Moxa Tn-5900 Series +1

Name of the Vulnerable Software and Affected Versions: Moxa TN-4900 Series firmware versions v1.2.4 and prior Moxa TN-5900 Series firmware versions v3.3 and prior Description: The issue is related to insufficient input validation in the certificate-delete function, which could potentially allow...

8.5CVSS8.1AI score0.00377EPSS
SaveExploits0References6
Openbugbounty
Openbugbounty
added 2023/05/15 1:31 p.m.10 views

secondharvestmidtn.org Cross Site Scripting vulnerability OBB-3338160

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/12/02 12:0 a.m.11 views

The vulnerability of the command interpreter in Moxa EDR-810, EDR-G902, EDR-G903, TN-4900, and TN-5916 router microprogramming devices allows attackers to execute arbitrary code.

The vulnerability of the command interpreter in Moxa EDR-810, EDR-G902, EDR-G903, TN-4900, and TN-5916 microprogrammed service routers stems from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HTTP/HTT...

10CVSS6AI score
SaveExploits0References1Affected Software5
Openbugbounty
Openbugbounty
added 2022/11/28 9:56 a.m.10 views

labour.tn.gov.in Cross Site Scripting vulnerability OBB-3076111

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Positive Technologies
Positive Technologies
added 2022/11/28 12:0 a.m.9 views

PT-2022-5654 · Moxa · Moxa Edr-G903 +4

Name of the Vulnerable Software and Affected Versions: Moxa TN-5916 versions affected versions not specified Moxa TN-4900 versions affected versions not specified Moxa EDR-G903 versions affected versions not specified Moxa EDR-G902 versions affected versions not specified Moxa EDR-810 versions...

7.8CVSS7.4AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/28 12:0 a.m.12 views

The vulnerability of Moxa TN-5916 series router microprogramming software, related to the possibility of modifying the cookie file, allows attackers to enhance their privileges.

The vulnerability of Moxa TN-5916 router microprogramming software is related to the possibility of modifying the cookie file. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

7.5CVSS5.5AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder