High severity8.1NVD Advisory· Published Aug 17, 2023· Updated Jun 17, 2026

CVE-2023-34217

Description

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-delete function, which could potentially allow malicious users to delete arbitrary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Moxa/Tn 4900 Firmware
cpe:2.3:o:moxa:tn-4900_firmware:*:*:*:*:*:*:*:*
Range: <=1.2.4
Moxa/Tn 5900 Firmware
cpe:2.3:o:moxa:tn-5900_firmware:*:*:*:*:*:*:*:*
Range: <=3.3
Moxa/TN-5900 Seriesllm-fuzzy2 versions
<=v3.3+ 1 more
- (no CPE)range: <=v3.3
- (no CPE)range: 1.0
Moxa/TN-4900 Seriesllm-fuzzy2 versions
<=v1.2.4+ 1 more
- (no CPE)range: <=v1.2.4
- (no CPE)range: 1.0
Moxa/EDR-G902cpe-rescue2 versions
1.0+ 1 more
- (no CPE)range: 1.0
- (no CPE)range: 1.0
Moxa/EDR G903cpe-rescue
Range: 1.0
Moxa/NAT-102 Seriesv5
Range: 1.0

Patches

Vulnerability mechanics

References

www.moxa.com/en/support/product-support/security-advisory/mpsa-230402-tn-5900-and-tn-4900-series-web-server-multiple-vulnerabilitiesnvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000