Skip to content
OpenAdvisories
Critical ICSA-21-278-03 5 CVEs

Moxa MXview Network Management Software

Published Oct 5, 2021 · Updated Oct 5, 2021

Vendor: Moxa Product: MXview Network Management Software

Summary

Successful exploitation of these vulnerabilities may allow an attacker to create or overwrite critical files to execute code, gain access to the program, obtain credentials, disable the software, read and modify otherwise inaccessible data, allow remote connections to internal communication channels, or interact and use MQTT remotely.

Vulnerabilities 5

  • Critical 10.0
    CVE-2021-38454 EPSS 16%

    Moxa MXview Network Management Software

    A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

    Moxa MXview Network Management Software ICS / OT
  • Critical 9.8
    CVE-2021-38456

    Moxa MXview Network Management Software

    A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords

    Moxa MXview Network Management Software ICS / OT
  • Critical 9.8
    CVE-2021-38458

    Moxa MXview Network Management Software

    A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

    Moxa MXview Network Management Software ICS / OT
  • High 7.5
    CVE-2021-38452

    Moxa MXview Network Management Software

    A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

    Moxa MXview Network Management Software ICS / OT
  • High 7.5
    CVE-2021-38460

    Moxa MXview Network Management Software

    A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

    Moxa MXview Network Management Software ICS / OT

Revision history

  1. #1

    ICSA-21-278-03 Moxa MXview Network Management Software

References