CVE-2023-39982CWE-321

MXsecurity Hardcoded Credential

High · published September 2, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
37.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle attacks and enable the decryption of SSH traffic.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00441 · 37.3th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2023-09-02T12:31Z
EPSS history
Timeline
  • 02 SEP 12:31Z
    MXsecurity Hardcoded Credential
    cvelistv5