CVE-2023-33237: Moxa Tn-5900 Firmware

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability. This vulnerability arises from inadequate authentication measures implemented in the web API handler, allowing low-privileged APIs to execute restricted actions that only high-privileged APIs are allowed This presents a potential risk of unauthorized exploitation by malicious actors.

Affected products

  • Moxa Tn-5900 Firmware: up to and including 3.3

Published 2023-08-17. Last modified 2026-06-17.