PT-2017-3807 · Moxa · Mgate Mb3180+5
Publicado
2017-09-04
·
Atualizado
2021-07-21
·
CVE-2019-9095
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Moxa MGate MB3170 versions prior to 4.1
Moxa MGate MB3270 versions prior to 4.1
Moxa MGate MB3280 versions prior to 3.1
Moxa MGate MB3480 versions prior to 3.1
Moxa MGate MB3660 versions prior to 2.3
Moxa MGate MB3180 versions prior to 2.1
Description
An issue was discovered that allows an attacker to intercept weakly encrypted passwords, potentially gaining administrative access. The vulnerability is related to the use of an unstable cryptographic algorithm, which can be exploited by a remote attacker to gain unauthorized access to protected information using a configuration file.
Recommendations
For Moxa MGate MB3170 versions prior to 4.1, update to version 4.1 or later.
For Moxa MGate MB3270 versions prior to 4.1, update to version 4.1 or later.
For Moxa MGate MB3280 versions prior to 3.1, update to version 3.1 or later.
For Moxa MGate MB3480 versions prior to 3.1, update to version 3.1 or later.
For Moxa MGate MB3660 versions prior to 2.3, update to version 2.3 or later.
For Moxa MGate MB3180 versions prior to 2.1, update to version 2.1 or later.
Correção
Use of a Broken Cryptographic Algorithm
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Mgate Mb3170
Mgate Mb3180
Mgate Mb3270
Mgate Mb3280
Mgate Mb3480
Mgate Mb3660