PT-2023-4389 · Moxa · Moxa Tn-5900 Series

Published 2023-08-16 · Updated 2024-10-28 · CVE-2023-33237

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa TN-5900 Series firmware version v3.3 and prior

Description The issue is related to improper authentication in the web API handler of the Moxa TN-5900 Series firmware, allowing low-privileged APIs to execute restricted actions. This presents a potential risk of unauthorized exploitation by malicious actors. The vulnerability arises from inadequate authentication measures implemented in the web API handler.

Recommendations For Moxa TN-5900 Series firmware version v3.3 and prior, consider restricting access to the web API handler until a patch is available. As a temporary workaround, limit the execution of restricted actions to only high-privileged APIs. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Improper Authentication

Weakness Enumeration

CWE-863

CWE-287

Related Identifiers

BDU:2023-04734

CVE-2023-33237

Affected Products

Moxa Tn-5900 Series

References · 9

• https://moxa.com/en/support/product-support/security-advisory/mpsa-230402-tn-5900-and-tn-4900-series-web-server-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-33237 · Security Note
• https://osv.dev/vulnerability/CVE-2023-33237 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04734 · Security Note
• https://twitter.com/CVEnew/status/1691995722496004216 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1692050880252588528 · Twitter Post
• https://t.me/cvenotify/99690 · Telegram Post
• https://twitter.com/cracbot/status/1692416096639623192 · Twitter Post
• https://t.me/cvenotify/56713 · Telegram Post