CVE-2023-39980: MXsecurity Authenticated Information Disclosure Due to SQL Injection
Published Sep 2, 2023
·Updated
A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity versions prior to v1.0.1. This vulnerability arises when special elements are not neutralized correctly, allowing remote attackers to alter SQL commands.
Affected Software
1 affected component
MOXA Mxsecurity<=1.0.1
Remediation
Information
Moxa has developed appropriate solution to address the vulnerability. The solution for affected product is shown below.
* MXsecurity: Please upgrade to software v1.1.0 or higher.
Event History
Sep 2, 2023
CVE Published
via MITRE·12:14 PM
Data Sourced
via MITRE·12:14 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-39980?
CVE-2023-39980 is a vulnerability that allows the unauthorized disclosure of authenticated information in MXsecurity versions prior to v1.0.1.
2
How can remote attackers exploit CVE-2023-39980?
Remote attackers can exploit CVE-2023-39980 by altering SQL commands due to incorrect neutralization of special elements.
3
Which software versions are affected by CVE-2023-39980?
MXsecurity versions prior to v1.0.1 are affected by CVE-2023-39980.
4
What is the severity of CVE-2023-39980?
CVE-2023-39980 has a severity rating of 8.1 (high).
5
How can I fix CVE-2023-39980?
To fix CVE-2023-39980, it is recommended to update to MXsecurity version 1.0.1 or newer.