ICSA-20-056-01

Moxa MB3xxx Series Protocol Gateways

view advisory published 2020-02-25

Successful exploitation of these vulnerabilities could crash the device, cause a buffer overflow, allow remote execution of arbitrary code, or allow access to sensitive information.

describes (8)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-9104US	high7.5OT elevated	1.01% (63rd)	—	2020-03-11
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The appl…
CVE-2019-9102US	high8.8OT elevated	1.57% (75th)	—	2020-03-11
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predic…
CVE-2019-9101US	high7.5OT elevated	0.97% (62nd)	—	2020-03-11
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Sensitiv…
CVE-2019-9099US	critical9.8	4.05% (91st)	—	2020-03-11
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A Buffer…
CVE-2019-9098US	high7.5	2.17% (82nd)	—	2020-03-11
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An Integ…
CVE-2019-9097US	medium5.3OT elevated	1.50% (74th)	—	2020-03-11
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A high r…
CVE-2019-9096US	critical9.8OT elevated	1.76% (78th)	—	2020-03-11
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Insuffic…
CVE-2019-9095US	critical9.8OT elevated	0.72% (54th)	—	2020-03-11
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attac…

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-20-056-01 JSONself
ICS Advisory ICSA-20-056-01 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (48)

MitigationMB3170 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3170 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3170 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3170 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3170 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3170 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3170 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3170 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3180 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3180 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3180 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3180 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3180 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3180 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3180 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3180 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3270 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3270 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3270 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3270 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3270 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3270 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3270 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3270 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3280 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3280 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3280 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3280 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3280 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3280 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3280 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3280 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3480 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3480 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3480 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3480 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3480 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3480 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3480 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3480 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3660 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3660 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3660 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3660 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3660 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3660 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3660 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
MitigationMB3660 series
Use a VPN tunnel for a secure and protected connection between the devices and host PC.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan