CVE-2017-15376

Name of the Vulnerable Software and Affected Versions MobaXterm version 10.4

Description The issue is related to the TELNET service in MobaXterm, which does not require authentication. This allows remote attackers to execute arbitrary commands via TCP port 23. The lack of authentication procedure in the TELNET service enables remote attackers to exploit this issue and perform unauthorized actions.

Recommendations For MobaXterm version 10.4, consider disabling the TELNET service until a patch is available to prevent remote attackers from executing arbitrary commands. Restrict access to TCP port 23 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.