CVE-2023-33235 MXsecurity Command Injection Vulnerability

What is CVE-2023-33235?

CVE-2023-33235 is a high-severity command injection vulnerability in Moxa MXsecurity Series, published on 22 May 2023. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted shell and subsequently execute arbitrary code.

Weakness: CWE-77

Which versions are affected by CVE-2023-33235?

It affects 1 product.

Products include Moxa Mxsecurity.

How do I fix CVE-2023-33235?

No fix has been published for CVE-2023-33235 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2023-33235 being exploited?

There is no known exploitation of CVE-2023-33235 in the wild and no public exploit code.

Other vulnerabilities in Moxa MXsecurity Series

• CVE-2023-39979 MXsecurity Authentication Bypass Critical 9.8
• CVE-2023-33236 MXsecurity Hardcoded Credential Vulnerability Critical 9.8
• CVE-2023-39981 MXsecurity Device Information Disclosure High 7.5
• CVE-2023-39982 MXsecurity Hardcoded Credential High 7.5
• CVE-2023-39980 MXsecurity Authenticated Information Disclosure Due to SQL Injection High 7.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-cx3c-2jcw-jmfg.