CVE-2023-33236

9.8 criticalEPSS 1.0%

Critical (9.8) in moxa mxsecurity. EPSS 1.0% chance of exploitation in the next 30 days.

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-11-01)
CWE: CWE-798
Published: 2023-05-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moxa:mxsecurity

References

https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities
https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities

Check your stack JSON