PT-2020-1729 · Moxa · Mgate
Published
2020-03-03
·
Updated
2020-03-03
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Moxa Mgate versions MB3180, MB3280, MB3480, MB3170, MB3270
Description
The issue is related to insufficient authentication in the firmware of Moxa Mgate protocol converters, allowing a remote attacker to gain access to the system with an empty username and password, and perform arbitrary actions on the vulnerable device.
Recommendations
For Moxa Mgate versions MB3180, MB3280, MB3480, MB3170, MB3270, consider restricting access to the device until a fix is available.
As a temporary workaround, restrict access to the device to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mgate