CVE-2017-15376: Code Injection
Published Oct 16, 2017
·Updated
The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute arbitrary commands via TCP port 23.
Affected Software
1 affected component
Mobatek MobaXterm=10.4
Event History
Oct 16, 2017
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15376?
CVE-2017-15376 is categorized as a critical vulnerability due to its ability to allow unauthorized remote access.
2
How do I fix CVE-2017-15376?
To fix CVE-2017-15376, it is recommended to upgrade Mobatek MobaXterm to a version that requires authentication for the TELNET service.
3
What impact does CVE-2017-15376 have?
CVE-2017-15376 allows remote attackers to execute arbitrary commands without authentication, potentially compromising the system.
4
Which software versions are affected by CVE-2017-15376?
CVE-2017-15376 specifically affects Mobatek MobaXterm version 10.4.
5
Can CVE-2017-15376 be exploited remotely?
Yes, CVE-2017-15376 can be exploited remotely through TCP port 23 without the need for authentication.