EUVD-2021-34029

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Vulnerable firmware could allow attacker to decrypt login details and gain admin rights.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2021-4161	23 Dec 202123:31	–	attackerkb
BDU FSTEC	The vulnerability of the HTTP server software of Moxa MGate MB3180, MB3280, and MB3480 allows attackers to gain unauthorized access to protected information or enhance their privileges.	14 Nov 202200:00	–	bdu_fstec
Circl	CVE-2021-4161	27 Dec 202122:23	–	circl
CNNVD	Moxa MGate 多款产品安全漏洞	23 Dec 202100:00	–	cnnvd
CVE	CVE-2021-4161	27 Dec 202118:48	–	cve
Cvelist	CVE-2021-4161 ICSA-21-357-01 Moxa MGate Protocol Gateways	27 Dec 202118:48	–	cvelist
ICS	Moxa MGate Protocol Gateways	23 Dec 202100:00	–	ics
NVD	CVE-2021-4161	27 Dec 202119:15	–	nvd
OSV	CVE-2021-4161	27 Dec 202119:15	–	osv
Prion	Code injection	27 Dec 202119:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "d515f08d-ca63-34af-b1f9-ec5ac20b8c42",
        "vendor": {
          "name": "Moxa"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "b5b77c85-ab36-39ea-8bd0-a36e9c162af5",
        "product": {
          "name": "MGate MB3480 Series"
        },
        "product_version": "all 3.2"
      },
      {
        "id": "e2ecad5f-841b-3cf3-b807-71162e38bbb2",
        "product": {
          "name": "MGate MB3280 Series"
        },
        "product_version": "all 4.1"
      },
      {
        "id": "ee833ad6-8403-34f7-b2c7-7c7e749277c0",
        "product": {
          "name": "MGate MB3180 Series"
        },
        "product_version": "all <2.2"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-357-01

03 Oct 2025 20:07Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5 - 9.8

CVSS 25

EPSS0.00661