CVE-2023-1257 CVE-2023-1257
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2023-1257?
CVE-2023-1257 is a high-severity vulnerability in MOXA UC-2100 Series, published on 7 Mar 2023.
Official description
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.
Which versions are affected by CVE-2023-1257?
It affects 54 products.
Products include Moxa Uc-2101-Lx Firmware, Moxa Uc-2102-Lx Firmware, Moxa Uc-2102-T-Lx Firmware, Moxa Uc-2104-Lx Firmware, Moxa Uc-2111-Lx Firmware, Moxa Uc-2112-Lx Firmware and 48 more.
How do I fix CVE-2023-1257?
No fix has been published for CVE-2023-1257 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-1257 being exploited?
There is no known exploitation of CVE-2023-1257 in the wild and no public exploit code.
Other vulnerabilities in MOXA UC-2100 Series
Sources
Also known as GHSA-whp2-gjjf-pvgr.