CVE-2019-9095
mediumpriority · track · 39OT risk · elevatedEPSS 0.007 · 54 %ileDEEURUUSEPSS · scored 2026-10-27
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedweidmueller_psirt
For all potential vulnerabilities, customers can download a patched firmware to secure their Modbus TCP/RTU Gateways properly. Please download and install the latest firmware for your device by following the procedure below: 1. Go to [www.weidmueller.com](https://www.weidmueller.com) (external link). 2. Enter the product number of the Modbus TCP/RTU Gateway you want to update into the search field and press "Enter". 3. On the next page, expand the drop-down menu **"SHOW DOWNLOADS"**. 4. Download the respective firmware from the download table. 5. Install the firmware on your device. Find below the appropriate patched firmware versions for all affected products: | Product number | Product name | Patched firmware version | |----------------|-------------------------------|------------------------------| | 1504460000 | IE-GW-MB-2TX-1RS232/485 | V2.1 (Build 21072817) | | 1504470000 | IE-GWT-MB-2TX-1RS232/485 | V2.1 (Build 21072817) |
- MitigationMB3170 seriescisa_csaf_ot
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
- MitigationMB3180 seriescisa_csaf_ot
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
- MitigationMB3270 seriescisa_csaf_ot
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
- MitigationMB3280 seriescisa_csaf_ot
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
- MitigationMB3480 seriescisa_csaf_ot
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
- MitigationMB3660 seriescisa_csaf_ot
Use a VPN tunnel for a secure and protected connection between the devices and host PC.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5–9.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (29)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- VDE-2022-008WEIDMUELLER: Multiple vulnerabilities in Modbus TCP/RTU Gateways2022-04-07csaf · weidmueller_psirtDE
Multiple issues have been found in the affected products. See CVE descriptions for details.
- ICSA-20-056-01Moxa MB3xxx Series Protocol Gateways2020-02-25icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could crash the device, cause a buffer overflow, allow remote execution of arbitrary code, or allow access to sensitive information.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://nvd.nist.gov/vuln/detail/CVE-2019-9095cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.0720/cnnvd
- https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilitiescnnvd
- https://www.us-cert.gov/ics/advisories/icsa-20-056-01cnnvd
- https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilitiesenisa_euvd
- https://www.us-cert.gov/ics/advisories/icsa-20-056-01enisa_euvd
- https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilitiesVendor Advisorynvd
- https://www.us-cert.gov/ics/advisories/icsa-20-056-01Third Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan