Search
Find a vulnerability
Search criteria
3 vulnerabilities found for MGate MB3180 Series by Moxa
CERTFR-2026-AVI-1250
Vulnerability from certfr_avis - Published: 2026-10-02 - Updated: 2026-10-02
De multiples vulnérabilités ont été découvertes dans les produits Moxa. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Moxa | MGate MB3480 Series | MGate MB3480 Series versions antérieures à v4.5.1, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5114 Series | MGate 5114 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5216 Series | MGate 5216 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate W5208 Series | MGate W5208 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5119 Series | MGate 5119 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5101-PBM-MN Series | MGate 5101-PBM-MN Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate MB3170 Series | MGate MB3170 Series versions antérieures à v4.7.1, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5102-PBM-PN Series | MGate 5102-PBM-PN Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate MB3280 Series | MGate MB3280 Series versions antérieures à v4.6.3, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5111 Series | MGate 5111 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5217 Series | MGate 5217 Series versions antérieures à v1.5.5, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate MB3180 Series | MGate MB3180 Series versions antérieures à v2.7.1, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5105-MB-EIP Series | MGate 5105-MB-EIP Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate EIP3170 Series | MGate EIP3170 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5109 Series | MGate 5109 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5103 Series | MGate 5103 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate MB3660 Series | MGate MB3660 Series versions antérieures à v3.4.5, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate 5118 Series | MGate 5118 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate W5108 Series | MGate W5108 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate EIP3270 Series | MGate EIP3270 Series toutes versions, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 | ||
| Moxa | MGate MB3270 Series | MGate MB3270 Series versions antérieures à v4.7.1, se référer au bulletin de sécurité de l'éditeur pour l'application du contournement provisoire pour la vulnérabilité CVE-2026-86326 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "MGate MB3480 Series versions ant\u00e9rieures \u00e0 v4.5.1, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3480 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5114 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5114 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5216 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5216 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate W5208 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate W5208 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5119 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5119 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5101-PBM-MN Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5101-PBM-MN Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate MB3170 Series versions ant\u00e9rieures \u00e0 v4.7.1, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3170 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5102-PBM-PN Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5102-PBM-PN Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate MB3280 Series versions ant\u00e9rieures \u00e0 v4.6.3, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3280 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5111 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5111 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5217 Series versions ant\u00e9rieures \u00e0 v1.5.5, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5217 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate MB3180 Series versions ant\u00e9rieures \u00e0 v2.7.1, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3180 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5105-MB-EIP Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5105-MB-EIP Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate EIP3170 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate EIP3170 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5109 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5109 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5103 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5103 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate MB3660 Series versions ant\u00e9rieures \u00e0 v3.4.5, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3660 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate 5118 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate 5118 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate W5108 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate W5108 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate EIP3270 Series toutes versions, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate EIP3270 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
},
{
"description": "MGate MB3270 Series versions ant\u00e9rieures \u00e0 v4.7.1, se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027application du contournement provisoire pour la vuln\u00e9rabilit\u00e9 CVE-2026-86326",
"product": {
"name": "MGate MB3270 Series",
"vendor": {
"name": "Moxa",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-86326",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86326"
},
{
"name": "CVE-2026-86325",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86325"
}
],
"initial_release_date": "2026-10-02T00:00:00",
"last_revision_date": "2026-10-02T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1250",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-02T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Moxa. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Moxa",
"vendor_advisories": [
{
"published_at": "2026-10-02",
"title": "Bulletin de s\u00e9curit\u00e9 Moxa MPSA-269540",
"url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-269540-cve-2026-86325,-cve-2026-86326-two-vulnerabilities-in-protocol-gateways"
}
]
}
CVE-2021-4161 (GCVE-0-2021-4161)
Vulnerability from nvd – Published: 2021-12-27 18:48 – Updated: 2024-09-16 19:24
VLAI
EPSS
VEX
Title
ICSA-21-357-01 Moxa MGate Protocol Gateways
Summary
The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.
Severity
9.8 (Critical)
CWE
- CWE-319 - Cleartext Transmission of Sensitive Information
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-2… | x_refsource_MISC |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | MGate MB3180 Series |
Affected:
all , < 2.2
(custom)
|
|
| Moxa | MGate MB3280 Series |
Affected:
all 4.1
|
|
| Moxa | MGate MB3480 Series |
Affected:
all 3.2
|
Date Public
2021-12-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:16:04.411Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"platforms": [
"NA"
],
"product": "MGate MB3180 Series",
"vendor": "Moxa",
"versions": [
{
"lessThan": "2.2",
"status": "affected",
"version": "all",
"versionType": "custom"
}
]
},
{
"platforms": [
"NA"
],
"product": "MGate MB3280 Series",
"vendor": "Moxa",
"versions": [
{
"status": "affected",
"version": "all 4.1"
}
]
},
{
"platforms": [
"NA"
],
"product": "MGate MB3480 Series",
"vendor": "Moxa",
"versions": [
{
"status": "affected",
"version": "all 3.2"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Parul Sindhwad, Anurag M. Chevendra, and Dr. Faruk Kazi of CoE-CNDS Lab; VJTI; and Mumbai-INDIA reported this vulnerability to Moxa."
}
],
"datePublic": "2021-12-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-319",
"description": "CWE-319 Cleartext Transmission of Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-12-27T18:48:19.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01"
}
],
"solutions": [
{
"lang": "en",
"value": "Moxa has developed the following mitigations to address this vulnerability.\n\nEnable \u2018HTTPS\u2019 and disable the HTTP console function under \u2018Console Settings\u2019\nMoxa also recommends users refer to Tech Note: Moxa Security Hardening Guide for MGate MB3000 Series"
}
],
"source": {
"advisory": "ICSA-21-357-01",
"discovery": "UNKNOWN"
},
"title": "ICSA-21-357-01 Moxa MGate Protocol Gateways",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"DATE_PUBLIC": "2021-12-23T23:05:00.000Z",
"ID": "CVE-2021-4161",
"STATE": "PUBLIC",
"TITLE": "ICSA-21-357-01 Moxa MGate Protocol Gateways"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "MGate MB3180 Series",
"version": {
"version_data": [
{
"platform": "NA",
"version_affected": "\u003c",
"version_name": "all",
"version_value": "2.2"
}
]
}
},
{
"product_name": "MGate MB3280 Series",
"version": {
"version_data": [
{
"platform": "NA",
"version_name": "all",
"version_value": "4.1"
}
]
}
},
{
"product_name": "MGate MB3480 Series",
"version": {
"version_data": [
{
"platform": "NA",
"version_name": "all",
"version_value": "3.2"
}
]
}
}
]
},
"vendor_name": "Moxa"
}
]
}
},
"credit": [
{
"lang": "eng",
"value": "Parul Sindhwad, Anurag M. Chevendra, and Dr. Faruk Kazi of CoE-CNDS Lab; VJTI; and Mumbai-INDIA reported this vulnerability to Moxa."
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-319 Cleartext Transmission of Sensitive Information"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01",
"refsource": "MISC",
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01"
}
]
},
"solution": [
{
"lang": "en",
"value": "Moxa has developed the following mitigations to address this vulnerability.\n\nEnable \u2018HTTPS\u2019 and disable the HTTP console function under \u2018Console Settings\u2019\nMoxa also recommends users refer to Tech Note: Moxa Security Hardening Guide for MGate MB3000 Series"
}
],
"source": {
"advisory": "ICSA-21-357-01",
"discovery": "UNKNOWN"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2021-4161",
"datePublished": "2021-12-27T18:48:19.982Z",
"dateReserved": "2021-12-23T00:00:00.000Z",
"dateUpdated": "2024-09-16T19:24:13.483Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-4161 (GCVE-0-2021-4161)
Vulnerability from cvelistv5 – Published: 2021-12-27 18:48 – Updated: 2024-09-16 19:24
VLAI
EPSS
VEX
Title
ICSA-21-357-01 Moxa MGate Protocol Gateways
Summary
The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.
Severity
9.8 (Critical)
CWE
- CWE-319 - Cleartext Transmission of Sensitive Information
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-2… | x_refsource_MISC |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Moxa | MGate MB3180 Series |
Affected:
all , < 2.2
(custom)
|
|
| Moxa | MGate MB3280 Series |
Affected:
all 4.1
|
|
| Moxa | MGate MB3480 Series |
Affected:
all 3.2
|
Date Public
2021-12-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:16:04.411Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"platforms": [
"NA"
],
"product": "MGate MB3180 Series",
"vendor": "Moxa",
"versions": [
{
"lessThan": "2.2",
"status": "affected",
"version": "all",
"versionType": "custom"
}
]
},
{
"platforms": [
"NA"
],
"product": "MGate MB3280 Series",
"vendor": "Moxa",
"versions": [
{
"status": "affected",
"version": "all 4.1"
}
]
},
{
"platforms": [
"NA"
],
"product": "MGate MB3480 Series",
"vendor": "Moxa",
"versions": [
{
"status": "affected",
"version": "all 3.2"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Parul Sindhwad, Anurag M. Chevendra, and Dr. Faruk Kazi of CoE-CNDS Lab; VJTI; and Mumbai-INDIA reported this vulnerability to Moxa."
}
],
"datePublic": "2021-12-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-319",
"description": "CWE-319 Cleartext Transmission of Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-12-27T18:48:19.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01"
}
],
"solutions": [
{
"lang": "en",
"value": "Moxa has developed the following mitigations to address this vulnerability.\n\nEnable \u2018HTTPS\u2019 and disable the HTTP console function under \u2018Console Settings\u2019\nMoxa also recommends users refer to Tech Note: Moxa Security Hardening Guide for MGate MB3000 Series"
}
],
"source": {
"advisory": "ICSA-21-357-01",
"discovery": "UNKNOWN"
},
"title": "ICSA-21-357-01 Moxa MGate Protocol Gateways",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"DATE_PUBLIC": "2021-12-23T23:05:00.000Z",
"ID": "CVE-2021-4161",
"STATE": "PUBLIC",
"TITLE": "ICSA-21-357-01 Moxa MGate Protocol Gateways"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "MGate MB3180 Series",
"version": {
"version_data": [
{
"platform": "NA",
"version_affected": "\u003c",
"version_name": "all",
"version_value": "2.2"
}
]
}
},
{
"product_name": "MGate MB3280 Series",
"version": {
"version_data": [
{
"platform": "NA",
"version_name": "all",
"version_value": "4.1"
}
]
}
},
{
"product_name": "MGate MB3480 Series",
"version": {
"version_data": [
{
"platform": "NA",
"version_name": "all",
"version_value": "3.2"
}
]
}
}
]
},
"vendor_name": "Moxa"
}
]
}
},
"credit": [
{
"lang": "eng",
"value": "Parul Sindhwad, Anurag M. Chevendra, and Dr. Faruk Kazi of CoE-CNDS Lab; VJTI; and Mumbai-INDIA reported this vulnerability to Moxa."
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-319 Cleartext Transmission of Sensitive Information"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01",
"refsource": "MISC",
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01"
}
]
},
"solution": [
{
"lang": "en",
"value": "Moxa has developed the following mitigations to address this vulnerability.\n\nEnable \u2018HTTPS\u2019 and disable the HTTP console function under \u2018Console Settings\u2019\nMoxa also recommends users refer to Tech Note: Moxa Security Hardening Guide for MGate MB3000 Series"
}
],
"source": {
"advisory": "ICSA-21-357-01",
"discovery": "UNKNOWN"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2021-4161",
"datePublished": "2021-12-27T18:48:19.982Z",
"dateReserved": "2021-12-23T00:00:00.000Z",
"dateUpdated": "2024-09-16T19:24:13.483Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}