Vulnerability · Published Sep 2, 2023 · Assigned by Moxa
CVE-2023-39983MXsecurity Register Database Pollution
Medium 5.3
In plain English
A medium-severity security flaw in MXsecurity Series from Moxa. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.6%top 49.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Moxa | MXsecurity Series | 1.0 – through 1.0.1 |
Weakness: CWE-915 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N