CVE-2023-34214
Second Order Command-injection Vulnerability in the Certificate-generation Function
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Second Order Command-injection Vulnerability in the Certificate-generation Function
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Reserved 2023-05-31 | Published 2023-08-17 | Updated 2024-10-28 | Assigner MoxaCWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
www.moxa.com/...0-series-web-server-multiple-vulnerabilities
Support options
