Moxa MGate Authentication Bypass Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-5804US | critical9.8 | — | ||
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attack… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-16-196-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-16-196-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- MitigationMGate MB3170
Moxa has released new versions of firmware, which has enhanced the security of the MB3x70 and MB3x80 families. This new firmware can be located on its web site at the following locations: MB3180, v1.8, MB3280, v2.7, and MB3480, v2.6 (http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=73&type_id=4)
http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=73&type_id=4 - MitigationMGate MB3180
Moxa has released new versions of firmware, which has enhanced the security of the MB3x70 and MB3x80 families. This new firmware can be located on its web site at the following locations: MB3180, v1.8, MB3280, v2.7, and MB3480, v2.6 (http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=73&type_id=4)
http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=73&type_id=4 - MitigationMGate MB3270
Moxa has released new versions of firmware, which has enhanced the security of the MB3x70 and MB3x80 families. This new firmware can be located on its web site at the following locations: MB3180, v1.8, MB3280, v2.7, and MB3480, v2.6 (http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=73&type_id=4)
http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=73&type_id=4 - MitigationMGate MB3280
Moxa has released new versions of firmware, which has enhanced the security of the MB3x70 and MB3x80 families. This new firmware can be located on its web site at the following locations: MB3180, v1.8, MB3280, v2.7, and MB3480, v2.6 (http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=73&type_id=4)
http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=73&type_id=4 - MitigationMGate MB3480
Moxa has released new versions of firmware, which has enhanced the security of the MB3x70 and MB3x80 families. This new firmware can be located on its web site at the following locations: MB3180, v1.8, MB3280, v2.7, and MB3480, v2.6 (http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=73&type_id=4)
http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=73&type_id=4
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan