CVE-2021-4161
ICSA-21-357-01 Moxa MGate Protocol Gateways
- State
- Published
- Severity
- 9.8 Critical
- Published
- Dec 27, 2021
- Updated
- Sep 16, 2024
- Reserved
- Dec 23, 2021
Description
The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | icscert |
Weaknesses
- CWE-319 Cleartext Transmission of Sensitive Information
Affected Products
| Product | Versions |
|---|---|
MGate MB3180 SeriesMoxa |
|
MGate MB3280 SeriesMoxa |
|
MGate MB3480 SeriesMoxa |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.