CVE-2021-4161 ICSA-21-357-01 Moxa MGate Protocol Gateways
Attackers can sniff traffic to decrypt credentials and gain admin access on Moxa MGate protocol gateways due to weak cryptography.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-4161?
CVE-2021-4161 is a critical vulnerability in Moxa MGate MB3180 Series, published on 27 Dec 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.
Weakness: CWE-319
Which versions are affected by CVE-2021-4161?
It affects 3 products.
Products include Moxa Mgate Mb3180 Firmware, Moxa Mgate Mb3280 Firmware, Moxa Mgate Mb3480 Firmware.
How do I fix CVE-2021-4161?
No fix has been published for CVE-2021-4161 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-4161 being exploited?
There is no known exploitation of CVE-2021-4161 in the wild and no public exploit code.
Other vulnerabilities in Moxa MGate MB3180 Series
Sources
Also known as GHSA-628p-46mw-v4f9.