CVE-2017-15376

Critical

Published: 16/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, allowing remote attackers to execute arbitrary commands via TCP port 23.

Risk Assessment

The lack of authentication in the TELNET service poses a serious security risk, enabling attackers to remotely take control of the system.

Recommendation

It is recommended to disable the TELNET service or configure it to require authentication, and to consider using more secure protocols such as SSH.

Original NVD description (English source)

The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute arbitrary commands via TCP port 23.