Moxa Tn-5900 Firmware vulnerabilities

11 CVEs affecting Moxa Tn-5900 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-34217, published 2023-08-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-46560, published 2022-01-26. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.
CVE-2023-33239, published 2023-08-17. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient…
CVE-2023-33238, published 2023-08-17. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from inadequate…
CVE-2023-34213, published 2023-08-17. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. TN-5900 Series firmware versions v3.3 and prior are vulnerable to command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the…
CVE-2023-34215, published 2023-08-17. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation and improper authentication in the…
CVE-2023-34216, published 2023-08-17. High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days. TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from…
CVE-2023-33237, published 2023-08-17. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability. This vulnerability arises from inadequate authentication measures implemented in the web API…
CVE-2023-3336, published 2023-07-05. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password…
CVE-2023-34217, published 2023-08-17. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient…
CVE-2023-34214, published 2023-08-17. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient…