Critical OpenSSH Vulnerability Exposes Moxa Ethernet Switches to Remote Code Execution

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical OpenSSH Vulnerability in Moxa Ethernet Switches Allows Remote Code Execution Moxa has issued a security advisory for CVE-2023-38408, a critical vulnerability in OpenSSH that affects multiple Ethernet switch models. With a CVSS score of 9.8, this flaw enables unauthenticated remote attackers to execute arbitrary code on vulnerable devices without user interaction. The vulnerability arises from an incomplete fix to a prior OpenSSH security issue. 2 sources 68