CVE-2023-1257
6.8
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD
Description
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.
Affected (55)
Products: Moxa: Uc 2101 Lx Firmware, Uc 2102 Lx Firmware, Uc 2102 T Lx Firmware, Uc 2104 Lx Firmware, Uc 2111 Lx Firmware, Uc 2112 Lx Firmware, Uc 2114 T Lx Firmware, Uc 2116 T Lx Firmware, Uc 3101 T Ap Lx Firmware, Uc 3101 T Eu Lx Firmware, Uc 3101 T Us Lx Firmware, Uc 3111 T Ap Lx Firmware, Uc 3111 T Ap Lx Nw Firmware, Uc 3111 T Eu Lx Firmware, Uc 3111 T Eu Lx Nw Firmware, Uc 3111 T Us Lx Firmware, Uc 3111 T Us Lx Nw Firmware, Uc 3121 T Ap Lx Firmware, Uc 3121 T Eu Lx Firmware, Uc 3121 T Us Lx Firmware, Uc 5101 Lx Firmware, Uc 5101 T Lx Firmware, Uc 5102 Lx Firmware, Uc 5102 T Lx Firmware, Uc 5111 Lx Firmware, Uc 5111 T Lx Firmware, Uc 5112 Lx Firmware, Uc 5112 T Lx Firmware, Uc 8112 Lx Firmware, Uc 8131 Lx Firmware, Uc 8132 Lx Firmware, Uc 8162 Lx Firmware, Uc 8112 Me T Lx Firmware, Uc 8112 Me T Lx1 Firmware, Uc 8112a Me T Lx Firmware, Uc 8210 T Lx S Firmware, Uc 8220 T Lx Firmware, Uc 8220 T Lx Ap S Firmware, Uc 8220 T Lx Eu S Firmware, Uc 8220 T Lx S Firmware, Uc 8220 T Lx Us S Firmware, Uc 8410a Lx Firmware, Uc 8410a Nw Lx Firmware, Uc 8410a Nw T Lx Firmware, Uc 8410a T Lx Firmware, Uc 8540 Lx Firmware, Uc 8540 T Ct Lx Firmware, Uc 8540 T Lx Firmware, Uc 8580 Lx Firmware, Uc 8580 Q Lx Firmware, Uc 8580 T Ct Lx Firmware, Uc 8580 T Ct Q Lx Firmware, Uc 8580 T Lx Firmware, Uc 8580 T Q Lx Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.3 to 1.5 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 2101 Lx | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.3 to 1.5 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 2102 Lx | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.3 to 1.5 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 2102 T Lx | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.3 to 1.5 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 2104 Lx | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.3 to 1.5 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 2111 Lx | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.3 to 1.5 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 2112 Lx | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.3 to 1.5 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 2114 T Lx | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.3 to 1.5 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 2116 T Lx | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3101 T Ap Lx | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3101 T Eu Lx | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3101 T Us Lx | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3111 T Ap Lx | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3111 T Ap Lx Nw | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3111 T Eu Lx | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3111 T Eu Lx Nw | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3111 T Us Lx | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3111 T Us Lx Nw | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3121 T Ap Lx | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3121 T Eu Lx | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.2 to 2.0 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 3121 T Us Lx | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 5101 Lx | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 5101 T Lx | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 5102 Lx | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 5102 T Lx | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 5111 Lx | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 5111 T Lx | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 5112 Lx | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 5112 T Lx | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8112 Lx | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8131 Lx | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8132 Lx | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8162 Lx | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 1.1 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8112 Me T Lx | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 1.1 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8112 Me T Lx1 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 1.1 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8112a Me T Lx | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 2.4 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8210 T Lx S | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 2.4 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8220 T Lx | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 2.4 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8220 T Lx Ap S | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 2.4 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8220 T Lx Eu S | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 2.4 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8220 T Lx S | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 2.4 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8220 T Lx Us S | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8410a Lx | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8410a Nw Lx | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8410a Nw T Lx | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8410a T Lx | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8540 Lx | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8540 T Ct Lx | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 to 1.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8540 T Lx | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8580 Lx | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8580 Q Lx | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8580 T Ct Lx | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8580 T Ct Q Lx | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8580 T Lx | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1 |
| Running on/with | Platform Versions |
|---|---|
Moxa Uc 8580 T Q Lx | All versions |
References (2)
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Timeline
No history available yet.