CVE-2023-33236: MXsecurity Hardcoded Credential Vulnerability

Published May 22, 2023

Updated

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.

Affected Software

1 affected component

MOXA Mxsecurity=1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade MXsecurity Series to a version that resolves this vulnerability.
Fixed in 1.0.1

Event History

May 22, 2023

CVE Published

via MITRE·06:40 AM

Data Sourced

via MITRE·06:40 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-33236?

CVE-2023-33236 is a hardcoded credential vulnerability in MXsecurity version 1.0 that allows the crafting of arbitrary JWT tokens and bypassing of authentication for web-based APIs.

What is the severity of CVE-2023-33236?

The severity of CVE-2023-33236 is critical with a CVSS score of 9.8.

How can MXsecurity version 1.0 be exploited?

MXsecurity version 1.0 can be exploited by crafting arbitrary JWT tokens to bypass authentication for web-based APIs.

Is there a fix available for CVE-2023-33236?

Please check the provided reference link for information on available fixes for CVE-2023-33236.

What is the CWE number for CVE-2023-33236?

CVE-2023-33236 is associated with CWE-798 (Use of Hard-coded Credentials).