CVE-2023-39982 MXsecurity Hardcoded Credential
Hardcoded SSH host keys in MXsecurity devices allow man-in-the-middle attacks, risking confidentiality and integrity of SSH communications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-39982?
CVE-2023-39982 is a high-severity vulnerability in Moxa MXsecurity Series, published on 2 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle attacks and enable the decryption of SSH traffic.
Which versions are affected by CVE-2023-39982?
It affects 1 product.
Products include Moxa Mxsecurity.
How do I fix CVE-2023-39982?
No fix has been published for CVE-2023-39982 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-39982 being exploited?
There is no known exploitation of CVE-2023-39982 in the wild and no public exploit code.
Other vulnerabilities in Moxa MXsecurity Series
- CVE-2023-39979 MXsecurity Authentication Bypass
- CVE-2023-33236 MXsecurity Hardcoded Credential Vulnerability
- CVE-2023-39981 MXsecurity Device Information Disclosure
- CVE-2023-33235 MXsecurity Command Injection Vulnerability
- CVE-2023-39980 MXsecurity Authenticated Information Disclosure Due to SQL Injection
Sources
Also known as GHSA-jvqq-8f3q-54hg.