Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

moxa mgate mb3170 firmware vulnerabilities and exploits

(subscribe to this query)
7.4
CVSSv3

CVE-2022-27048

A vulnerability has been discovered in Moxa MGate which allows an malicious user to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Ser...
Moxa Mgate Mb3170i FirmwareMoxa Mgate Mb3170i-t FirmwareMoxa Mgate Mb3170-m-st FirmwareMoxa Mgate Mb3170-m-sc-t FirmwareMoxa Mgate Mb3170 FirmwareMoxa Mgate Mb3170-t FirmwareMoxa Mgate Mb3170-m-sc FirmwareMoxa Mgate Mb3170i-s-sc FirmwareMoxa Mgate Mb3270i FirmwareMoxa Mgate Mb3270i-t FirmwareMoxa Mgate Mb3170i-m-sc FirmwareMoxa Mgate Mb3170-s-sc-t FirmwareMoxa Mgate Mb3170i-m-sc-t FirmwareMoxa Mgate Mb3270 FirmwareMoxa Mgate Mb3270-t FirmwareMoxa Mgate Mb3170-s-sc FirmwareMoxa Mgate Mb3170-m-st-t FirmwareMoxa Mgate Mb3170i-s-sc-t FirmwareMoxa Mgate Mb3280 FirmwareMoxa Mgate Mb3480 Firmware
9.8
CVSSv3

CVE-2016-5804

Moxa MGate MB3180 prior to 1.8, MGate MB3280 prior to 2.7, MGate MB3480 prior to 2.6, MGate MB3170 prior to 2.5, and MGate MB3270 prior to 2.7 use weak encryption, which allows remote malicious users to bypass authentication via a brute-force series of guesses for a parameter val...
Moxa Mgate Mb3180 FirmwareMoxa Mgate Mb3280 FirmwareMoxa Mgate Mb3480 FirmwareMoxa Mgate Mb3170 FirmwareMoxa Mgate Mb3270 Firmware
9.8
CVSSv3

CVE-2019-9096

An issue exists on Moxa MGate MB3170 and MB3270 devices prior to 4.1, MB3280 and MB3480 devices prior to 3.1, MB3660 devices prior to 2.3, and MB3180 devices prior to 2.1. Insufficient password requirements for the MGate web application may allow an malicious user to gain access ...
Moxa Mb3170 FirmwareMoxa Mb3270 FirmwareMoxa Mb3180 FirmwareMoxa Mb3280 FirmwareMoxa Mb3480 FirmwareMoxa Mb3660 Firmware
7.5
CVSSv3

CVE-2019-9104

An issue exists on Moxa MGate MB3170 and MB3270 devices prior to 4.1, MB3280 and MB3480 devices prior to 3.1, MB3660 devices prior to 2.3, and MB3180 devices prior to 2.1. The application's configuration file contains parameters that represent passwords in cleartext.
Moxa Mb3170 FirmwareMoxa Mb3270 FirmwareMoxa Mb3180 FirmwareMoxa Mb3280 FirmwareMoxa Mb3480 FirmwareMoxa Mb3660 Firmware
9.8
CVSSv3

CVE-2019-9095

An issue exists on Moxa MGate MB3170 and MB3270 devices prior to 4.1, MB3280 and MB3480 devices prior to 3.1, MB3660 devices prior to 2.3, and MB3180 devices prior to 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access.
Moxa Mb3170 FirmwareMoxa Mb3270 FirmwareMoxa Mb3180 FirmwareMoxa Mb3280 FirmwareMoxa Mb3480 FirmwareMoxa Mb3660 Firmware
7.5
CVSSv3

CVE-2019-9098

An issue exists on Moxa MGate MB3170 and MB3270 devices prior to 4.1, MB3280 and MB3480 devices prior to 3.1, MB3660 devices prior to 2.3, and MB3180 devices prior to 2.1. An Integer overflow in the built-in web server allows remote malicious users to initiate DoS.
Moxa Mb3170 FirmwareMoxa Mb3270 FirmwareMoxa Mb3180 FirmwareMoxa Mb3280 FirmwareMoxa Mb3480 FirmwareMoxa Mb3660 Firmware
5.3
CVSSv3

CVE-2019-9097

An issue exists on Moxa MGate MB3170 and MB3270 devices prior to 4.1, MB3280 and MB3480 devices prior to 3.1, MB3660 devices prior to 2.3, and MB3180 devices prior to 2.1. A high rate of transit traffic may cause a low-memory condition and a denial of service.
Moxa Mb3170 FirmwareMoxa Mb3270 FirmwareMoxa Mb3180 FirmwareMoxa Mb3280 FirmwareMoxa Mb3480 FirmwareMoxa Mb3660 Firmware
8.8
CVSSv3

CVE-2019-9102

An issue exists on Moxa MGate MB3170 and MB3270 devices prior to 4.1, MB3280 and MB3480 devices prior to 3.1, MB3660 devices prior to 2.3, and MB3180 devices prior to 2.1. A predictable mechanism of generating tokens allows remote malicious users to bypass the cross-site request ...
Moxa Mb3170 FirmwareMoxa Mb3270 FirmwareMoxa Mb3180 FirmwareMoxa Mb3280 FirmwareMoxa Mb3480 FirmwareMoxa Mb3660 Firmware
5.3
CVSSv3

CVE-2019-9103

An issue exists on Moxa MGate MB3170 and MB3270 devices prior to 4.1, MB3280 and MB3480 devices prior to 3.1, MB3660 devices prior to 2.3, and MB3180 devices prior to 2.1. An attacker can access sensitive information (e.g., conduct username disclosure attacks) on the built-in WEB...
Moxa Mb3170 FirmwareMoxa Mb3270 FirmwareMoxa Mb3180 FirmwareMoxa Mb3280 FirmwareMoxa Mb3480 FirmwareMoxa Mb3660 Firmware
9.8
CVSSv3

CVE-2019-9099

An issue exists on Moxa MGate MB3170 and MB3270 devices prior to 4.1, MB3280 and MB3480 devices prior to 3.1, MB3660 devices prior to 2.3, and MB3180 devices prior to 2.1. A Buffer overflow in the built-in web server allows remote malicious users to initiate DoS, and probably to ...
Moxa Mb3170 FirmwareMoxa Mb3270 FirmwareMoxa Mb3180 FirmwareMoxa Mb3280 FirmwareMoxa Mb3480 FirmwareMoxa Mb3660 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook