CVE-2021-38452

CVE-2021-38452 — Moxa MXview path traversal affects MXview Network Management Software, versions 3.x–3.2.2. The vulnerability is a path traversal in an unauthenticated route (/tmp) that allows reading arbitrary files, potentially exposing plaintext passwords and configuration data used to execute...

CVE-2021-38456

CVE-2021-38456 affects Moxa MXview Network Management Software versions 3.x–3.2.2 and is caused by the use of hard-coded passwords. Impacted actors could gain access through default credentials, with a user impact described as high. The related materials indicate a high-severity, remotely exploit...

CVE-2021-38460

MXview, version 3.x–3.2.2, contains CVE-2021-38460: a credential leakage/ unprotected transport vulnerability that may allow an attacker to obtain credentials. The condition is tied to password exposure in transit and storage, enabling potential unauthorized access. mitigations documented across ...

CVE-2021-38454

CVE-2021-38454 affects Moxa MXview Network Management Software versions 3.x–3.2.2. It is described as a misconfigured service that allows remote MQTT connections, enabling attackers to interact with the MQTT broker and potentially trigger remote code execution via subsequent actions (e.g., comman...

CVE-2021-38458

MXview Network Management Software (Moxa) versions 3.x–3.2.2 contain CVE-2021-38458, an improper neutralization of special elements that can lead to remote code execution. The issue is part of a set of chainable vulnerabilities (CVE-2021-38452/38454/38456/38460) that can enable pre-authenticated ...