PT-2023-1633 · Unknown · Mxsecurity

Esj4Y · Published 2023-03-08 · Updated 2023-06-02 · CVE-2023-33236

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MXsecurity version 1.0

Description The issue is related to hardcoded credentials in MXsecurity, which can be exploited to craft arbitrary JWT tokens and bypass authentication for web-based APIs. This allows a remote attacker to elevate their privileges.

Recommendations For MXsecurity version 1.0, consider disabling the use of hardcoded credentials and JWT token generation until a patch is available. Restrict access to web-based APIs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2023-01149

CVE-2023-33236

ZDI-23-720

Affected Products

Mxsecurity

References · 9

• https://moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-720 · Security Note
• https://bdu.fstec.ru/vul/2023-01149 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-33236 · Security Note
• https://osv.dev/vulnerability/CVE-2023-33236 · Vendor Advisory
• https://t.me/cibsecurity/64512 · Telegram Post
• https://t.me/cvenotify/50896 · Telegram Post
• https://t.me/cvenotify/50899 · Telegram Post
• https://t.me/true_secator/4456 · Telegram Post