An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism.
CPE | Name | Operator | Version |
---|---|---|---|
mb3170_firmware | le | 4.0 | |
mb3180_firmware | le | 2.0 | |
mb3270_firmware | le | 4.0 | |
mb3280_firmware | le | 3.0 | |
mb3480_firmware | le | 3.0 | |
mb3660_firmware | le | 2.2 |