CVE-2017-15376

9.8 criticalEPSS 3.8%

Critical (9.8) in mobatek mobaxterm. EPSS 3.8% chance of exploitation in the next 30 days.

The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute arbitrary commands via TCP port 23.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2017-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mobatek:mobaxterm

References

https://www.vulnerability-lab.com/get_content.php?id=2097
https://www.vulnerability-lab.com/get_content.php?id=2097

Check your stack JSON