CVE-2023-3336 — TN-5900 Series User Enumeration Vulnerability

CVE-2023-3336

TN-5900 Series User Enumeration Vulnerability PUBLISHED

Description (CNA)

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.

Affected (CNA)

Vendor / product	Versions
Moxa / TN-5900 Series	affected 1.0 through 3.3

CWE

CWE-204

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230401-tn-5900-series-user-enumeration-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230401-tn-5900-series-user-enumeration-vulnerability

CISA-ADP

No English description supplied.

No references supplied.