CVE-2023-34215
Second Order Command-injection Vulnerability in the Certificate-generation Function
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Second Order Command-injection Vulnerability in the Certificate-generation Function
TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the certification-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Reserved 2023-05-31 | Published 2023-08-17 | Updated 2024-10-28 | Assigner MoxaCWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
www.moxa.com/...0-series-web-server-multiple-vulnerabilities
Support options
