Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-33237

Authentication Bypass Without Administrator Privilege

Description

TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability. This vulnerability arises from inadequate authentication measures implemented in the web API handler, allowing low-privileged APIs to execute restricted actions that only high-privileged APIs are allowed This presents a potential risk of unauthorized exploitation by malicious actors.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moxa TN-5900 Series

Default version status: unaffected

  • 1.0 to ≤ 3.3affected

References