Lucene search
+L

122 matches found

NCSC
NCSC
added 2021/12/24 12:0 a.m.42 views

Vulnerability found in Moxa MGate

A vulnerability has been found in Moxa MGate. The vulnerability allows an unauthenticated remote malicious person to obtain obtain sensitive data. The vulnerable Moxa MGate series have vulnerable firmware that makes it possible for an attacker to intercept the traffic and then decrypt the login...

9CVSS6.6AI score0.01666EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/12/23 12:0 a.m.11 views

Moxa MGate 多款产品安全漏洞

MOXA Moxa MGate MB3280 and Moxa MGate MB3480 are both products of MOXA Corporation, Taiwan, China.Moxa MGate MB3280 is a MB3280 series Ethernet gateway product.Moxa MGate MB3480 is a MB3480 series Ethernet gateway product. A security vulnerability exists in the Moxa MGate MB3180/MB3280/MB3480...

9.8CVSS7.4AI score0.00661EPSS
SaveExploits0References5
CNVD
CNVD
added 2021/06/22 12:0 a.m.7 views

MOXA Mgate MB3180 Denial of Service Vulnerability

The MOXA MGate MB3180 is a technology product with a port transfer rate of 0.9216 Mbps. A denial of service exists in MOXA Mgate MB3180 version 2.1 Build 18113012. An attacker can exploit this vulnerability by sending an incomplete HTTP request using the slowhttptest utility to exhaust the...

7.5CVSS6.8AI score0.01934EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/06/22 12:0 a.m.30 views

MOXA Mgate MB3180 Denial of Service Vulnerability (CNVD-2021-45454)

The MOXA MGate MB3180 is a technology product with a port transfer rate of 0.9216 Mbps. A denial of service exists in MOXA Mgate MB3180 version 2.1 Build 18113012. An attacker can exploit this vulnerability by sending a large number of TCP SYN packets to exhaust the resources of a web service,...

7.5CVSS6.7AI score0.01321EPSS
SaveExploits1References1
NVD
NVD
added 2021/06/18 8:15 p.m.34 views

CVE-2021-33824

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...

7.5CVSS0.01934EPSS
SaveExploits1References3
NVD
NVD
added 2021/06/18 8:15 p.m.33 views

CVE-2021-33823

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

7.5CVSS0.01321EPSS
SaveExploits1References2
OSV
OSV
added 2021/06/18 8:15 p.m.10 views

CVE-2021-33824

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...

7.5CVSS7.1AI score0.01934EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/06/18 8:15 p.m.4 views

CVE-2021-33823

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

7.5CVSS7.1AI score0.01321EPSS
SaveExploits1References3
Prion
Prion
added 2021/06/18 8:15 p.m.21 views

Denial of service

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...

5CVSS7.6AI score0.01934EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2021/06/18 8:15 p.m.15 views

Denial of service

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

5CVSS7.5AI score0.01321EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/06/18 7:8 p.m.93 views

CVE-2021-33824

Affected product: MOXA MGate MB3180, version 2.1 Build 18113012. Issue: denial of service caused by an attacker using slowhttptest to send incomplete HTTP requests, making the web server wait for packet completion and exhaust resources. Impact: availability (web service) is degraded or unavailabl...

7.5CVSS7.5AI score0.01934EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/06/18 7:2 p.m.32 views

CVE-2021-33823

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

7.7AI score0.01321EPSS
SaveExploits1References2
CVE
CVE
added 2021/06/18 7:2 p.m.100 views

CVE-2021-33823

CVE-2021-33823 affects MOXA Mgate MB3180 (Version 2.1 Build 18113012). The issue allows an attacker to send a large volume of TCP SYN packets to exhaust the web service resources, resulting in denial of service and availability impact described as high in CVSS 3.1. The connected sources corrobora...

7.5CVSS7.4AI score0.01321EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/06/18 12:0 a.m.8 views

MOXA Mgate MB3180 资源管理错误漏洞

The MOXA MGate MB3180 is a technology product with a port transfer rate of 0.9216 Mbps. A denial of service exists in MOXA Mgate MB3180 version 2.1 Build 18113012. An attacker can exploit this vulnerability by sending a large number of TCP SYN packets to exhaust the resources of a web service,...

7.5CVSS5.6AI score0.01321EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/06/18 12:0 a.m.8 views

MOXA MGate MB3180 资源管理错误漏洞

The MOXA MGate MB3180 is a technology product with a port transfer rate of 0.9216 Mbps. A denial of service exists in MOXA Mgate MB3180 version 2.1 Build 18113012. An attacker can exploit this vulnerability by sending an incomplete HTTP request using the slowhttptest utility to exhaust the...

7.5CVSS5.7AI score0.01934EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.9 views

The vulnerability of the DestIP parameter in the microprogramming software for industrial Ethernet switches Moxa MGate 5105-MB-EIP allows a hacker to enhance their privileges or execute arbitrary code.

The vulnerability of the DestIP parameter in the microprogrammed industrial Ethernet switch Moxa MGate 5105-MB-EIP relates to the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a remote attacker to increase their...

9CVSS8AI score0.08577EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/23 12:0 a.m.7 views

The vulnerability of the microprogrammed industrial Ethernet switch Moxa MGate 5105-MB-EIP lies in the lack of protection for operational data, allowing an intruder to gain unauthorized access to the protected information.

The vulnerability of the microprogrammed industrial Ethernet switch Moxa MGate 5105-MB-EIP lies in the lack of protection for operational data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

7.8CVSS5.5AI score
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2020/03/16 12:0 a.m.14 views

Moxa MGate Detection Consolidation

Consolidation of Moxa MGate detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

7.3AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/12 12:0 a.m.10 views

The vulnerability of the microprogrammed software of Moxa Mgate MB3180, MB3280, MB3480, MB3170, and MB3270 relates to authentication deficiencies. This allows a hacker to gain access to the system with a dummy username and password, and perform arbitrary actions on the vulnerable device.

The vulnerability of the microprogrammed software of Moxa Mgate MB3180, MB3280, MB3480, MB3170, and MB3270 relates to authentication deficiencies. Exploiting this vulnerability allows a malicious actor to gain access to the system with a dummy username and password, and perform arbitrary actions ...

10CVSS5.6AI score
SaveExploits0References1Affected Software5
NVD
NVD
added 2020/03/11 3:15 p.m.18 views

CVE-2019-9102

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery CSRF protection...

8.8CVSS7.8AI score0.01575EPSS
SaveExploits0References2
Rows per page
Query Builder