CVE-2023-1257

CVE-2023-1257

High · published March 7, 2023

CVSS v3.1
7.6
EPSS
0%
Percentile
23.3
In the wild
Unconfirmed
What it is

An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.3th percentile
Published
2023-03-07T16:54Z
EPSS history
Timeline
  • 07 MAR 16:54Z
    CVE-2023-1257
    cvelistv5