CVE-2023-33236: Moxa Mxsecurity

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.

Affected products

• Moxa Mxsecurity: version 1.0 only

Published 2023-05-22. Last modified 2026-06-17.