PT-2021-20337 · Moxa · Moxa Mgate Mb3180

Guan Yu Lai + 2 · Published 2021-06-18 · Updated 2021-06-24 · CVE-2021-33824

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: MOXA Mgate MB3180 version 2.1 Build 18113012

Description: An issue allows attackers to send incomplete HTTP requests using the slowhttptest tool, causing the server to wait for the packet to finish the connection until its resources are exhausted, resulting in a denial-of-service.

Recommendations: For MOXA Mgate MB3180 version 2.1 Build 18113012, consider implementing measures to handle incomplete HTTP requests, such as setting timeouts for connection closure or limiting the number of concurrent connections, until a patch is available. As a temporary workaround, restrict access to the web server to minimize the risk of exploitation.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2021-33824

Affected Products

Moxa Mgate Mb3180

References · 7

• 🔥 https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021-33824.md · Exploit
• https://osv.dev/vulnerability/CVE-2021-33824 · Vendor Advisory
• https://moxa.com/en/products/industrial-edge-connectivity/protocol-gateways/modbus-tcp-gateways/mgate-mb3180-mb3280-mb3480-series · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33824 · Security Note
• https://github.com/shekyan/slowhttptest · Note
• https://t.me/cibsecurity/25563 · Telegram Post
• https://t.me/cvenotify/16554 · Telegram Post