Moxa MGate Protocol Gateways

Summary

Vulnerabilities 1

• Critical 9.8
  CVE-2021-4161

  ICSA-21-357-01 Moxa MGate Protocol Gateways

  The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.

  Moxa MGate MB3180 Series MGate MB3480 Series MGate MB3280 Series ICS / OT
  Dec 27, 2021

Revision history

1. 2021-12-23 #1

   ICSA-21-357-01 Moxa MGate Protocol Gateways

References

• ICS Advisory ICSA-21-357-01 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-21-357-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B