Description
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism.
Advisories 2
- VDE-2022-008 WEIDMUELLER: Multiple vulnerabilities in Modbus TCP/RTU Gateways CERT@VDE · Apr 7, 2022
- ICSA-20-056-01 Moxa MB3xxx Series Protocol Gateways CISA ICS & IT advisories · Feb 25, 2020