HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2022-27048

CVSS 7.4v3.1pub. 2022-04-15upd. 2024-11-21

A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Moxa Mgate Mb3170

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170 Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170i

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170i Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170i M Sc

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170i M Sc Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170i M Sc T

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170i M Sc T Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170i S Sc

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170i S Sc Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170i S Sc T

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170i S Sc T Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170i T

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170i T Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170 M Sc

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170 M Sc Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170 M Sc T

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170 M Sc T Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170 M St

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170 M St Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170 M St T

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170 M St T Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170 S Sc

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170 S Sc Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170 S Sc T

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170 S Sc T Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3170 T

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3170 T Firmware

    OS
    Moxa
    ≤ 4.2

  • Moxa Mgate Mb3270

    HW
    Moxa
    all versions

  • Moxa Mgate Mb3270 Firmware

    OS
    Moxa
    ≤ 4.2
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-4161CRITICAL9.8PL ✓same product

Moxa MGate MB3x — przechwycenie danych logowania przez nieszyfrowany ruch

CVE-2016-5804CRITICAL9.8PL ✓same product

Słabe szyfrowanie umożliwia ominięcie uwierzytelnienia w Moxa MGate MB3xxx

CVE-2023-39979CRITICAL9.8PL ✓same vendor

Podatność Auth Bypass w Moxa MXsecurity — niewystarczająca losowość uwierzytelnienia

CVE-2023-33236CRITICAL9.8PL ✓same vendor

Moxa MXsecurity – hardcoded credentials umożliwiające bypass uwierzytelnienia

CVE-2023-28697CRITICAL9.8PL ✓same vendor

Moxa MiiNePort E1 — brak kontroli dostępu umożliwia zdalne przejęcie urządzenia