Securing Network Management Systems (Part 2): Moxa MXview
ID: 17bb74b9-cca3-5a93-b2b3-303b820983b1
STIX ID: report--17bb74b9-cca3-5a93-b2b3-303b820983b1
Feed Name: Claroty Team82
Threat Score
Team82 discloses five critical vulnerabilities in Moxa MXview (3.x–3.2.2) that allow an unauthenticated attacker to read sensitive files (including MQTT credentials), inject malicious MQTT messages, and achieve pre-auth remote code execution as SYSTEM by chaining path traversal and command-injection flaws; Moxa patched these issues in MXview 3.2.4 and users are urged to upgrade.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.