CVE-2021-38452

CVE-2021-38452 — Moxa MXview path traversal affects MXview Network Management Software, versions 3.x–3.2.2. The vulnerability is a path traversal in an unauthenticated route (/tmp) that allows reading arbitrary files, potentially exposing plaintext passwords and configuration data used to execute...

CVE-2021-38456

CVE-2021-38456 affects Moxa MXview Network Management Software versions 3.x–3.2.2 and is caused by the use of hard-coded passwords. Impacted actors could gain access through default credentials, with a user impact described as high. The related materials indicate a high-severity, remotely exploit...

CVE-2021-38458

MXview Network Management Software (Moxa) versions 3.x–3.2.2 contain CVE-2021-38458, an improper neutralization of special elements that can lead to remote code execution. The issue is part of a set of chainable vulnerabilities (CVE-2021-38452/38454/38456/38460) that can enable pre-authenticated ...

CVE-2021-38454

CVE-2021-38454 affects Moxa MXview Network Management Software versions 3.x–3.2.2. It is described as a misconfigured service that allows remote MQTT connections, enabling attackers to interact with the MQTT broker and potentially trigger remote code execution via subsequent actions (e.g., comman...

CVE-2021-38460

MXview, version 3.x–3.2.2, contains CVE-2021-38460: a credential leakage/ unprotected transport vulnerability that may allow an attacker to obtain credentials. The condition is tied to password exposure in transit and storage, enabling potential unauthorized access. mitigations documented across ...