CVE-2023-39979 MXsecurity Authentication Bypass
Remote attackers can bypass authentication in Moxa MXsecurity devices due to insufficient random values in the web service authenticator.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-39979?
CVE-2023-39979 is a critical authentication bypass vulnerability in Moxa MXsecurity Series, published on 2 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.
Which versions are affected by CVE-2023-39979?
It affects 1 product.
Products include Moxa Mxsecurity.
How do I fix CVE-2023-39979?
No fix has been published for CVE-2023-39979 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-39979 being exploited?
There is no known exploitation of CVE-2023-39979 in the wild and no public exploit code.
Other vulnerabilities in Moxa MXsecurity Series
- CVE-2023-33236 MXsecurity Hardcoded Credential Vulnerability
- CVE-2023-39981 MXsecurity Device Information Disclosure
- CVE-2023-39982 MXsecurity Hardcoded Credential
- CVE-2023-33235 MXsecurity Command Injection Vulnerability
- CVE-2023-39980 MXsecurity Authenticated Information Disclosure Due to SQL Injection
Sources
Also known as GHSA-vv74-p9wh-mpf3.