ZDI-CAN-19895: ZDI-23-721: Moxa MXsecurity Series Restricted Shell Command Injection Remote Code Execution Vulnerability
Published May 24, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MXsecurity Series appliances. Authentication is required to exploit this vulnerability.
Affected Software
1 affected component
MOXA MXsecurity Series
Event History
May 24, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-19895?
The severity of ZDI-CAN-19895 is considered critical due to the potential for remote code execution.
2
How do I fix ZDI-CAN-19895?
To fix ZDI-CAN-19895, ensure that you apply the latest security updates provided by Moxa for the MXsecurity Series appliances.
3
Who is affected by ZDI-CAN-19895?
ZDI-CAN-19895 affects installations of Moxa MXsecurity Series appliances that have not been updated.
4
What type of attack does ZDI-CAN-19895 involve?
ZDI-CAN-19895 involves remote code execution, which requires authentication to exploit.
5
What are the potential impacts of ZDI-CAN-19895?
The potential impacts of ZDI-CAN-19895 include unauthorized access and control over the affected Moxa MXsecurity Series appliances.