CVE-2023-33235

CVSS V2 None CVSS V3 None
Description
MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted shell and subsequently execute arbitrary code.
Overview
  • CVE ID
  • CVE-2023-33235
  • Assigner
  • psirt@moxa.com
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-05-22T06:15:11
  • Last Modified Date
  • 2023-05-22T06:15:11
Weakness Enumerations
CWE URL
CWE-77 http://cwe.mitre.org/data/definitions/77.html
References
Reference URL Reference Tags
https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-33235
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33235
History
Created Old Value New Value Data Type Notes
2023-05-22 07:00:35 Added to TrackCVE
2023-05-22 07:00:36 Weakness Enumeration new