Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-34213

Second Order Command-injection Vulnerability in the Key-generation Function

Description

TN-5900 Series firmware versions v3.3 and prior are vulnerable to command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moxa TN-5900 Series

Default version status: unaffected

  • 1.0 to ≤ 3.3affected

References