CVE-2024-6786
MXview One Series vulnerable to Path Traversal
- State
- Published
- Severity
- 6.0 Medium
- Published
- Sep 21, 2024
- Updated
- Sep 26, 2024
- Reserved
- Jul 16, 2024
Description
The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.0 Medium | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | Moxa |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | Moxa |
Weaknesses
- CWE-24 Path Traversal: '../filedir'
Affected Products
| Product | Versions |
|---|---|
MXview One SeriesMoxa |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.