VULNERABILITY INTELLIGENCE

CVE-2023-39982

CVSS score7.5 HIGH
EPSS probability0.44%
CISA KEVNot currently listed
Published2023-09-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle attacks and enable the decryption of SSH traffic.

Weakness classification

  • psirt@moxa.com: CWE-321
  • nvd@nist.gov: CWE-798

Primary references