PT-2024-7477 · Unknown · Mxsecurity

Chris Huang + 1 · Published 2024-10-18 · Updated 2024-10-22 · CVE-2024-4739

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: MXsecurity versions v1.1.0 and prior

Description: The issue is related to the lack of access restriction to a resource from unauthorized users. This allows an attacker, who has acquired a valid authenticator, to pose as an authorized user and successfully access the resource. The vulnerability is also associated with the use of dangerous methods or functions, which can enable an attacker to elevate their privileges.

Recommendations: For MXsecurity versions v1.1.0 and prior, consider restricting access to the resource until a patch is available. As a temporary workaround, limit the use of authenticators to minimize the risk of unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-749

Related Identifiers

BDU:2024-08857

CVE-2024-4739

Affected Products

Mxsecurity

References · 7

• https://osv.dev/vulnerability/CVE-2024-4739 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4739 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/mpsa-231878-mxsecurity-series-multiple-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08857 · Security Note
• https://twitter.com/CVEnew/status/1847196998816223504 · Twitter Post
• https://t.me/cvedetector/8306 · Telegram Post
• https://t.me/cvenotify/98726 · Telegram Post