CVE-2017-15376

PoC —

CVSS 3.1

9.8 critical

EPSS

4%p89

Published

Oct 16, 2017 (Oct 16, 2017)

Modified

Jun 17, 2026

Description

The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute arbitrary commands via TCP port 23.

Vendors: mobatek
Products: mobaxterm
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news0 stories

No ingested article mentions this CVE yet.