Approved changes feed: RSS · Atom

cpe:2.3:o:moxa:tn-5900_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductTn 5900 Firmware (e4f4f89d-eef2-5238-98e0-9ac1dacdcab5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3336 vulnerable 2026-06-08 06:09:39.251212 TN-5900 Series User Enumeration Vulnerability
MEDIUM (5.3)
TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.
Published: 2023-07-05T09:11:54.255Z
Updated: 2024-11-20T21:22:45.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34217 vulnerable 2026-06-08 06:06:24.892976 Second Order Command-injection Vulnerability in the Certificate-delete Function
HIGH (8.1)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-delete function, which could potentially allow malicious users to delete arbitrary files.
Published: 2023-08-17T06:48:38.770Z
Updated: 2024-10-02T19:58:00.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34216 vulnerable 2026-06-08 06:06:24.891894 Second Order Command-injection Vulnerability in the Key-delete Function
HIGH (8.1)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to delete arbitrary files.
Published: 2023-08-17T06:41:41.568Z
Updated: 2024-10-08T14:10:45.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34215 vulnerable 2026-06-08 06:06:24.891024 Second Order Command-injection Vulnerability in the Certificate-generation Function
HIGH (7.2)
TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the certification-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Published: 2023-08-17T06:35:06.293Z
Updated: 2024-10-28T06:08:37.703Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34214 vulnerable 2026-06-08 06:06:24.890423 Second Order Command-injection Vulnerability in the Certificate-generation Function
HIGH (7.2)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Published: 2023-08-17T02:26:05.428Z
Updated: 2024-10-28T06:07:21.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34213 vulnerable 2026-06-08 06:06:24.889260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33239 vulnerable 2026-06-08 06:06:22.099107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33238 vulnerable 2026-06-08 06:06:22.095054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33237 vulnerable 2026-06-08 06:06:22.084930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46560 vulnerable 2026-06-08 05:38:03.502403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46559 vulnerable 2026-06-08 05:38:03.500740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.