CVE-2021-38458

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2021-10-12

Last modified

2024-09-16

Weaknesses

CWE-74

Affected products

• Mxview (Moxa)
• Mxview Network Management Software (Moxa)

References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-278-03