ZDI-23-720: Moxa MXsecurity Series Hardcoded JWT Key Authentication Bypass Vulnerability
Published May 24, 2023
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of Moxa MXsecurity Series appliances. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
MOXA MXsecurity Series
Event History
May 24, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-720?
The severity of ZDI-23-720 is high due to the potential for remote authentication bypass.
2
How do I fix ZDI-23-720?
To fix ZDI-23-720, apply the latest firmware updates provided by Moxa for MXsecurity Series appliances.
3
What type of attack is possible with ZDI-23-720?
With ZDI-23-720, remote attackers can exploit the vulnerability to bypass authentication and gain unauthorized access.
4
Which devices are affected by ZDI-23-720?
ZDI-23-720 affects Moxa MXsecurity Series appliances.
5
Is user authentication required to exploit ZDI-23-720?
No, authentication is not required to exploit the vulnerability identified by ZDI-23-720.