ZDI-CAN-19896: ZDI-23-720: Moxa MXsecurity Series Hardcoded JWT Key Authentication Bypass Vulnerability
Published May 24, 2023
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of Moxa MXsecurity Series appliances. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
MOXA MXsecurity Series
Event History
May 24, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-19896?
The severity of ZDI-CAN-19896 is critical as it allows remote attackers to bypass authentication.
2
How do I fix ZDI-CAN-19896?
To fix ZDI-CAN-19896, apply the latest firmware update provided by Moxa for MXsecurity Series appliances.
3
What type of vulnerability is ZDI-CAN-19896?
ZDI-CAN-19896 is an authentication bypass vulnerability affecting Moxa MXsecurity Series appliances.
4
Can ZDI-CAN-19896 be exploited remotely?
Yes, ZDI-CAN-19896 can be exploited remotely without requiring authentication.
5
What impact does ZDI-CAN-19896 have on Moxa MXsecurity Series appliances?
ZDI-CAN-19896 allows unauthorized access to the Moxa MXsecurity Series appliances, posing serious security risks.