CVE-2023-39979
02.09.2023, 13:15
There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.Enginsight
| Vendor | Product | Version |
|---|---|---|
| moxa | mxsecurity | 𝑥 < 1.1.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-334 - Small Space of Random ValuesThe number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.
- CWE-330 - Use of Insufficiently Random ValuesThe software uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.