by Kastro
Paper/Archive/CVE-2021-4161

CVE-2021-4161

Moxa MGate MB3180 Series — ICSA-21-357-01 Moxa MGate Protocol Gateways

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 53.3.533 × 2010.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.

Affected

ProductAffectedFixed inSource
MGate MB3180 Seriesall – < 2.22.2CNA
MGate MB3280 Seriesall 4.1–CNA
MGate MB3480 Seriesall 3.2–CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcisa.gov/uscert/ics/advisories/icsa-21-357-01