GHSA-9h7v-p6j4-42v8Medium
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of...
🔗 CVE IDs covered (1)
📋 Description
A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material.