CVE-2021-38460: high-severity vulnerability in Moxa MXview Network Management Software
Moxa MXview Network Management Software
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 1.8%
In short
A path traversal flaw in Moxa MXview allows attackers to create or overwrite critical system files, potentially giving them control over the software and the systems it manages.
Technical detail
Path traversal vulnerability (CWE-523) in Moxa MXview 3.x–3.2.2 enables an unauthenticated or low-privileged attacker to manipulate file paths and create or overwrite executable programs and libraries, leading to arbitrary code execution with the privileges of the affected application.
Summary generated and translated by AI from the official description.
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Moxa · MXview Network Management SoftwareRelated CVEs — Moxa MXview Network Management Software
In the same product, most dangerous first.