{"id":"CVE-2023-39981","aliases":["EUVD-2023-43674","GHSA-wmrq-xq49-r4mw"],"status":"published","title":"MXsecurity Device Information Disclosure","description":"A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0082,"percentile":0.57723,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287","CWE-306"],"published":"2023-09-02T12:25:12Z","modified":"2026-06-17T06:13:04Z","products":[{"vendor":"moxa","product":"mxsecurity"},{"vendor":"moxa","product":"mxsecurity series"}],"references":[{"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230403-mxsecurity-series-multiple-vulnerabilities","tags":["vendor-advisory","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39981"},{"url":"https://github.com/advisories/GHSA-wmrq-xq49-r4mw"}],"sources":{"cve":[{"id":"CVE-2023-39981","title":"MXsecurity Device Information Disclosure","description":"A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.","status":"published","published":"2023-09-02T12:25:12.195Z","modified":"2024-10-28T06:11:47.253Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-43674","description":"A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.","status":"published","published":"2023-09-02T12:25:12Z","modified":"2024-10-28T06:11:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T00:05:16.619611Z"}],"ghsa":[{"id":"GHSA-wmrq-xq49-r4mw","title":"A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions...","description":"A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.\n\n","status":"published","published":"2023-09-02T15:30:18Z","modified":"2024-10-28T06:33:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-287","CWE-306"],"updated_at":"2026-11-02T14:58:37.515988Z"}],"nvd":[{"id":"CVE-2023-39981","description":"A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.","status":"published","published":"2023-09-02T13:15:45.257Z","modified":"2026-06-17T06:13:04.993Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-306","CWE-287"],"updated_at":"2026-11-02T14:08:27.181588Z"}]}}