High severity7.2NVD Advisory· Published Aug 17, 2023· Updated Jun 17, 2026

CVE-2023-33238

Description

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from inadequate input validation in the certificate management function, which could potentially allow malicious users to execute remote code on affected devices.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Moxa/TN-5900 Seriesllm-fuzzy2 versions
<=v3.3+ 1 more
- (no CPE)range: <=v3.3
- (no CPE)range: 1.0
Moxa/TN-4900 Seriesllm-fuzzy2 versions
<=v1.2.4+ 1 more
- (no CPE)range: <=v1.2.4
- (no CPE)range: 1.0
Moxa/EDR-810 Seriescpe-rescue
Range: 1.0
Moxa/EDR-G902cpe-rescue2 versions
1.0+ 1 more
- (no CPE)range: 1.0
- (no CPE)range: 1.0
Moxa/EDR G903cpe-rescue
Range: 1.0
Moxa/NAT-102 Seriesv5
Range: 1.0

Patches

Vulnerability mechanics

References

www.moxa.com/en/support/product-support/security-advisory/mpsa-230402-tn-5900-and-tn-4900-series-web-server-multiple-vulnerabilitiesnvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000