CVE-2015-7244

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-11-04 · updated 2026-06-17
Weakness: CWE-284

Description

The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently does not require authentication for X11 connections, which allows remote attackers to execute arbitrary commands or obtain sensitive information via X11 packets.

Affected products

Mobatek MobaXterm: through 8.2

References

http://blog.mobatek.net/post/mobaxterm-new-release-8.3/
http://www.kb.cert.org/vuls/id/316888
http://www.securifera.com/advisories/cve-2015-7244
http://blog.mobatek.net/post/mobaxterm-new-release-8.3/
http://www.kb.cert.org/vuls/id/316888
http://www.securifera.com/advisories/cve-2015-7244

Get alerted when CVE-2015-7244 or the next vulnerability affects your stack