CRITICAL🇵🇱 Wersja polska

CVE-2021-4161

CVSS 9.8v3.1pub. 2021-12-27upd. 2024-11-21

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Moxa Mgate Mb3180

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3180 Firmware

    OS
    Moxa
    ≤ 2.2

  • Moxa Mgate Mb3280

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3280 Firmware

    OS
    Moxa
    ≤ 4.1

  • Moxa Mgate Mb3480

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3480 Firmware

    OS
    Moxa
    ≤ 3.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2016-5804CRITICAL9.8PL ✓same product

Słabe szyfrowanie umożliwia ominięcie uwierzytelnienia w Moxa MGate MB3xxx

CVE-2022-27048HIGH7.4same product

A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MIT...

CVE-2021-33823HIGH7.5same product

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of ...

CVE-2021-33824HIGH7.5same product

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool t...

CVE-2023-39979CRITICAL9.8PL ✓same vendor

Podatność Auth Bypass w Moxa MXsecurity — niewystarczająca losowość uwierzytelnienia