CVE-2023-33236 — MXsecurity Hardcoded Credential Vulnerability

CVE-2023-33236

MXsecurity Hardcoded Credential Vulnerability PUBLISHED

Description (CNA)

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.

Affected (CNA)

Vendor / product	Versions
Moxa / MXsecurity Series	affected 1.0

CWE

CWE-798

References

https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.