CVE-2019-9099

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A Buffer overflow in the built-in web server allows remote attackers to initiate DoS, and probably to execute arbitrary code (issue 1 of 2).

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-03-11

Last modified

2024-08-04

Weaknesses

CWE-120

Affected products

• Mb3170 Firmware (Moxa)
• Mb3180 Firmware (Moxa)
• Mb3270 Firmware (Moxa)
• Mb3280 Firmware (Moxa)
• Mb3480 Firmware (Moxa)
• Mb3660 Firmware (Moxa)

References

• https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilities
• https://www.us-cert.gov/ics/advisories/icsa-20-056-01