Approved changes feed: RSS · Atom

cpe:2.3:h:moxa:tn-5900:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductTn 5900 (46b60f80-4df2-532f-b303-aa0459656e12)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3336 not_vulnerable 2026-06-08 06:09:39.251284 TN-5900 Series User Enumeration Vulnerability
MEDIUM (5.3)
TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.
Published: 2023-07-05T09:11:54.255Z
Updated: 2024-11-20T21:22:45.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3336 vulnerable 2026-06-08 06:09:39.248540 TN-5900 Series User Enumeration Vulnerability
MEDIUM (5.3)
TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.
Published: 2023-07-05T09:11:54.255Z
Updated: 2024-11-20T21:22:45.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34217 not_vulnerable 2026-06-08 06:06:24.892995 Second Order Command-injection Vulnerability in the Certificate-delete Function
HIGH (8.1)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-delete function, which could potentially allow malicious users to delete arbitrary files.
Published: 2023-08-17T06:48:38.770Z
Updated: 2024-10-02T19:58:00.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34216 not_vulnerable 2026-06-08 06:06:24.891912 Second Order Command-injection Vulnerability in the Key-delete Function
HIGH (8.1)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to delete arbitrary files.
Published: 2023-08-17T06:41:41.568Z
Updated: 2024-10-08T14:10:45.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34215 not_vulnerable 2026-06-08 06:06:24.891043 Second Order Command-injection Vulnerability in the Certificate-generation Function
HIGH (7.2)
TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the certification-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Published: 2023-08-17T06:35:06.293Z
Updated: 2024-10-28T06:08:37.703Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34215 vulnerable 2026-06-08 06:06:24.890858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34214 not_vulnerable 2026-06-08 06:06:24.890440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34214 vulnerable 2026-06-08 06:06:24.889961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34213 not_vulnerable 2026-06-08 06:06:24.889400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34213 vulnerable 2026-06-08 06:06:24.889083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33239 not_vulnerable 2026-06-08 06:06:22.099126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33239 vulnerable 2026-06-08 06:06:22.098563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33238 not_vulnerable 2026-06-08 06:06:22.095083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33238 vulnerable 2026-06-08 06:06:22.085643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33237 not_vulnerable 2026-06-08 06:06:22.084978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33237 vulnerable 2026-06-08 06:06:22.083061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46560 not_vulnerable 2026-06-08 05:38:03.502526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46559 not_vulnerable 2026-06-08 05:38:03.501809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.