critical9.8

CVE-2023-33236

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability.

Impact

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.

Affected products

Vendor	Product	Affected versions
Moxa	Mxsecurity	Version 1.0

Weakness classification

CWE-798

References

NVD record
CVE.org record
https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities
https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities