CVE-2021-4161

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2021-12-27

Last modified

2024-09-16

Weaknesses

CWE-319

Affected products

• Mgate Mb3180 Firmware (Moxa)
• Mgate Mb3180 Series (Moxa)
• Mgate Mb3280 Firmware (Moxa)
• Mgate Mb3280 Series (Moxa)
• Mgate Mb3480 Firmware (Moxa)
• Mgate Mb3480 Series (Moxa)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01