CVE-2024-4740 MXsecurity Use of Hard-coded Credentials

What is CVE-2024-4740?

CVE-2024-4740 is a medium-severity vulnerability in Moxa MXsecurity Series, published on 18 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials. This vulnerability could allow an attacker to tamper with sensitive data.

Weakness: CWE-798

Which versions are affected by CVE-2024-4740?

It affects 1 product.

Products include Moxa Mxsecurity.

How do I fix CVE-2024-4740?

No fix has been published for CVE-2024-4740 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-4740 being exploited?

There is no known exploitation of CVE-2024-4740 in the wild and no public exploit code.

Other vulnerabilities in Moxa MXsecurity Series

• CVE-2023-39979 MXsecurity Authentication Bypass Critical 9.8
• CVE-2023-33236 MXsecurity Hardcoded Credential Vulnerability Critical 9.8
• CVE-2023-39981 MXsecurity Device Information Disclosure High 7.5
• CVE-2023-39982 MXsecurity Hardcoded Credential High 7.5
• CVE-2023-33235 MXsecurity Command Injection Vulnerability High 7.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-cg45-4w7m-qc4v.