Moxa Patches MXsecurity Vulnerabilities That Could Be Exploited in OT Attacks


Two potentially critical flaws in Moxa’s MXsecurity software have been alerted to organisations employing it, and they might be used by malevolent hackers to attack networks for operational technology (OT). MXsecurity is a programme for managing the security of industrial networks that was created for OT settings.

A major vulnerability that can be remotely exploited to overcome authentication (CVE-2023-33235) and a high-severity issue in the SSH command-line interface that can result in remote command execution (CVE-2023-33236) are both present in the product, according to security researcher Simon Janz.x000D With the launch of version 1.0.1, Moxa fixed the security flaws.

Read More…