There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.
Weakness
The number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mxsecurity | Moxa | * | 1.1.0 (excluding) |