PT-2023-4676 · Unknown · Mxsecurity

Darren Martyn · Published 2023-08-08 · Updated 2024-10-28 · CVE-2023-39982

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions MXsecurity versions prior to v1.0.1

Description The issue is related to the use of a hard-coded SSH host key in the MXsecurity platform, which may facilitate man-in-the-middle attacks and enable the decryption of SSH traffic. This could put the confidentiality and integrity of SSH communications at risk on the affected device.

Recommendations For MXsecurity versions prior to v1.0.1, update to version v1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting SSH access to minimize the risk of exploitation. Avoid using the hard-coded SSH host key in the affected device until the issue is resolved.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-321

Related Identifiers

BDU:2023-05089

CVE-2023-39982

Affected Products

Mxsecurity

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2023-39982 · Security Note
• https://osv.dev/vulnerability/CVE-2023-39982 · Vendor Advisory
• https://moxa.com/en/support/product-support/security-advisory/mpsa-230403-mxsecurity-series-multiple-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05089 · Security Note
• https://vuldb.com/ru/?id.238621 · Note
• https://twitter.com/cracbot/status/1698214279378559278 · Twitter Post
• https://twitter.com/CVEnew/status/1697954564065075567 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1697984985142067372 · Twitter Post
• https://twitter.com/NUYTSTECH/status/1704446829461651688 · Twitter Post
• https://t.me/cvenotify/99696 · Telegram Post