Mxsecurity
Approved changes feed: RSS · Atom
cpe:2.3:a:moxa:mxsecurity:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Moxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f) |
|---|---|
| Product | Mxsecurity (5a210673-0b64-5052-ad73-ca633cb3d15d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/moxa-linux/moxa-security-utils |
purl2cpe | 2026-06-01 10:14:40.490206 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4740 |
vulnerable | 2026-06-08 06:50:18.516342 |
MXsecurity Use of Hard-coded Credentials
MEDIUM (5.3)
MXsecurity software versions v1.1.0 and prior are vulnerable because of the use of hard-coded credentials. This vulnerability could allow an attacker to tamper with sensitive data.
Published: 2024-10-18T08:21:15.659Z
Updated: 2024-10-18T14:38:21.017Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4739 |
vulnerable | 2026-06-08 06:50:18.514838 |
MXsecurity License Generation Function Disclosure
MEDIUM (5.3)
The lack of access restriction to a resource from unauthorized users makes MXsecurity software versions v1.1.0 and prior vulnerable. By acquiring a valid authenticator, an attacker can pose as an authorized user and successfully access the resource.
Published: 2024-10-18T08:11:04.908Z
Updated: 2024-10-18T14:40:34.104Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39983 |
vulnerable | 2026-06-08 06:09:38.236036 |
MXsecurity Register Database Pollution
MEDIUM (5.3)
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application.
Published: 2023-09-02T12:37:12.342Z
Updated: 2024-09-30T20:15:47.058Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39982 |
vulnerable | 2026-06-08 06:09:38.235513 |
MXsecurity Hardcoded Credential
HIGH (7.5)
A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle attacks and enable the decryption of SSH traffic.
Published: 2023-09-02T12:31:03.492Z
Updated: 2024-10-28T06:13:21.724Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39981 |
vulnerable | 2026-06-08 06:09:38.235106 |
MXsecurity Device Information Disclosure
HIGH (7.5)
A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.
Published: 2023-09-02T12:25:12.195Z
Updated: 2024-10-28T06:11:47.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39980 |
vulnerable | 2026-06-08 06:09:38.234690 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39979 |
vulnerable | 2026-06-08 06:09:38.234172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.