CVE-2021-38458: critical vulnerability in Moxa MXview Network Management Software
Moxa MXview Network Management Software
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 1.8%
In short
MXview allows an attacker to create or overwrite important system files by using specially crafted file paths, potentially letting them run malicious code on the affected computer.
Technical detail
Path traversal vulnerability in Moxa MXview 3.x–3.2.2 enables an unauthenticated or low-privileged attacker to write arbitrary files to critical directories, leading to arbitrary code execution through overwriting executable programs or libraries.
Summary generated and translated by AI from the official description.
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Moxa · MXview Network Management SoftwareRelated CVEs — Moxa MXview Network Management Software
In the same product, most dangerous first.