CVE-2021-4161criticalCWE-319

CVE-2021-4161: critical vulnerability in Moxa MGate MB3180 Series

ICSA-21-357-01 Moxa MGate Protocol Gateways

Published · Updated

Follow this CVE+ Monitor MGate MB3180 Series+ Monitor MGate MB3280 Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.7%
The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Moxa · MGate MB3180 SeriesMoxa · MGate MB3280 SeriesMoxa · MGate MB3480 Series