HIGH🇵🇱 Wersja polska

CVE-2021-33824

CVSS 7.5v3.1pub. 2021-06-18upd. 2024-11-21

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Moxa Mgate Mb3180

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3180 Firmware

    OS
    Moxa
    2.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-4161CRITICAL9.8PL ✓same product

Moxa MGate MB3x — przechwycenie danych logowania przez nieszyfrowany ruch

CVE-2016-5804CRITICAL9.8PL ✓same product

Słabe szyfrowanie umożliwia ominięcie uwierzytelnienia w Moxa MGate MB3xxx

CVE-2021-33823HIGH7.5same product

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of ...

CVE-2023-39979CRITICAL9.8PL ✓same vendor

Podatność Auth Bypass w Moxa MXsecurity — niewystarczająca losowość uwierzytelnienia

CVE-2023-33236CRITICAL9.8PL ✓same vendor

Moxa MXsecurity – hardcoded credentials umożliwiające bypass uwierzytelnienia