CVE-2019-9101

State: Published
Severity: 8.8 High
Published: Mar 11, 2020
Updated: Aug 4, 2024
Reserved: Feb 24, 2019

Description

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Sensitive information is sent to the web server in cleartext, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server.

Scores

CVSS	Score	Vector	Source
3.0	8.8 High	CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R	mitre

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://www.us-cert.gov/ics/advisories/icsa-20-056-01
https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilities

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.