msm vulnerabilities and fixes

Recent CVEs affecting msm, with upgrade or downgrade steps. 3 tracked.

msm has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-06-07. Highest priority: CVE-2023-33282 (score 60/100).

• CVE-2023-33284 HIGH 8.8 UPGRADE Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability
• CVE-2023-33283 MEDIUM 5.5 UPGRADE Marval MSM through 14.19.0.12476 uses a static encryption key for secrets
• CVE-2023-33282 CRITICAL 9.8 UPGRADE Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials

FAQ

How do I fix msm vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is msm being exploited right now?

None of the tracked msm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which msm CVE should I patch first?

CVE-2023-33282 currently ranks highest (60/100): Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials.

RSS feed for msm · ← Back to latest CVEs