CVE-2023-1257 - CVE House
Back to Database
Status published High CVE-2023-1257

CVE-2023-1257

Vulnerability Description

An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-1257

Credits & Attribution

No credits recorded in the NVD database.

References

More from MOXA

View All →
CVE-2022-2044
MOXA NPort 5110 Out-of-bounds Write
High 8.2
CVE-2022-2043
MOXA NPort 5110 Out-of-bounds Write
High 7.5
CVE-2020-25198
MOXA NPort IAW5000A-I/O Series
High 8.8
CVE-2020-25196
MOXA NPort IAW5000A-I/O Series
Critical 9.8
CVE-2020-25194
MOXA NPort IAW5000A-I/O Series
High 8.8

Affected Vendor

Affected Software

UC-8580 Series, UC-8540 Series, UC-8410A Series, UC-8200 Series, UC-8100A-ME-T Series, UC-8100 Series, UC-5100 Series, UC-3100 Series, UC-2100 Series, UC-2100-W Series
Vulnerable Versions:
V1.1, V1.0 to V1.2, V2.2, V1.0 to V2.4, V1.0 to V1.1, V1.2, V1.2 to V2.0, V1.3 to V1.5

Timeline

Official Publish: March 7th, 2023
Last Modified: January 16th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.