Critical OpenSSH Vulnerability Exposes Moxa Ethernet Switches to Remote Code Execution
ID: 4030f4f6-0f18-53e3-a119-d1d69a24039a
STIX ID: report--4030f4f6-0f18-53e3-a119-d1d69a24039a
Feed Name: cybersecurityNews.com
Threat Score
Moxa issued a security advisory for CVE-2023-38408 — a critical (CVSS 3.1 9.8) OpenSSH PKCS#11/ssh-agent forwarding vulnerability affecting multiple EDS and RKS series Ethernet switches that can enable unauthenticated remote code execution; Moxa provides fixed firmware (EDS v4.1.58, RKS v5.0.4) and recommends immediate patching, network segmentation, access controls, and monitoring until updates are applied.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.