CVE-2021-38460

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

Score

CVSS 3.1 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2021-10-12

Last modified

2024-09-17

Weaknesses

CWE-22, CWE-523

Affected products

• Mxview (Moxa)
• Mxview Network Management Software (Moxa)

References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-278-03