Moxa MB3xxx Series Protocol Gateways

🗓️ 25 Feb 2020 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 88 Views

Moxa MB3xxx Series Protocol Gateways, Vulnerable to Remote Code Execution, Buffer Overflows, and Information Exposur

Reporter	Title	Published	Views	Family All 79
BDU FSTEC	The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 allows a hacker to execute arbitrary code or cause a service failure.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 allows a hacker to execute arbitrary code or cause a service failure.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 allows a hacker to perform arbitrary actions on the vulnerable device.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software for Moxa MGate MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 arises from the use of a unstable cryptographic algorithm. This allows attackers to gain unauthorized access to protected information.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 allows a hacker to gain unauthorized access to protected information.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 allows a hacker to intercept administrator credentials and other confidential information, gaining access to the control system.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 allows a hacker to gain full access to the system.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software in Moxa MGate MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 protocols arises from the unencrypted storage of confidential information, allowing attackers to gain unauthorized access to protected data.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 is related to uncontrolled resource consumption, which allows a hacker to cause service failures.	25 Sep 201900:00	–	bdu_fstec
CNVD	Buffer Overflow Vulnerability in Multiple Moxa Products	26 Feb 202000:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2020/icsa-20-056-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-20-056-01
us-cert	www.us-cert.gov/ncas/tips/ST04-014
us-cert	www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B

25 Feb 2020 00:00Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

CVSS 39.8

EPSS0.09092

remote code execution buffer overflow information exposure weak cryptographic algorithm csrf protection bypass weak password requirement clear text transmission configuration data storage