CVE-2019-9096

mediumpriority · track · 40OT risk · elevatedEPSS 0.018 · 78 %ileDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.76% (78th) EPSS
CVSS 5 · medium
Is it mine?
29 products
Check your exposure
Who says so?
6 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Insufficient password requirements for the MGate web application may allow an attacker to gain access by brute-forcing account passwords.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their Modbus TCP/RTU Gateways properly. Please download and install the latest firmware for your device by following the procedure below: 1. Go to [www.weidmueller.com](https://www.weidmueller.com) (external link). 2. Enter the product number of the Modbus TCP/RTU Gateway you want to update into the search field and press "Enter". 3. On the next page, expand the drop-down menu **"SHOW DOWNLOADS"**. 4. Download the respective firmware from the download table. 5. Install the firmware on your device. Find below the appropriate patched firmware versions for all affected products: | Product number | Product name | Patched firmware version | |----------------|-------------------------------|------------------------------| | 1504460000 | IE-GW-MB-2TX-1RS232/485 | V2.1 (Build 21072817) | | 1504470000 | IE-GWT-MB-2TX-1RS232/485 | V2.1 (Build 21072817) |

  • MitigationMB3170 seriescisa_csaf_ot

    Use a VPN tunnel for a secure and protected connection between the devices and host PC.

  • MitigationMB3180 seriescisa_csaf_ot

    Use a VPN tunnel for a secure and protected connection between the devices and host PC.

  • MitigationMB3270 seriescisa_csaf_ot

    Use a VPN tunnel for a secure and protected connection between the devices and host PC.

  • MitigationMB3280 seriescisa_csaf_ot

    Use a VPN tunnel for a secure and protected connection between the devices and host PC.

  • MitigationMB3480 seriescisa_csaf_ot

    Use a VPN tunnel for a secure and protected connection between the devices and host PC.

  • MitigationMB3660 seriescisa_csaf_ot

    Use a VPN tunnel for a secure and protected connection between the devices and host PC.

02

cvss

Technical severity, 0–10. One row per scoring source.

9.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5–9.8

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 10 · impact 2.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9
v3.09.8criticalCVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:Nsecondary · ENISA EU
v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · cve@mitre.org USexploitability 3.9 · impact 5.9
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Weidmüller PSIRT DE
v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-521USprimaryCWE-319USCWE-521USCWE-521US
04

affected products (29)

Products and version ranges known to be affected.

showing 20 of 29
05

advisories (2)

Vendor and ecosystem advisories describing this.

  • VDE-2022-008WEIDMUELLER: Multiple vulnerabilities in Modbus TCP/RTU Gateways2022-04-07csaf · weidmueller_psirtDE

    Multiple issues have been found in the affected products. See CVE descriptions for details.

  • ICSA-20-056-01Moxa MB3xxx Series Protocol Gateways2020-02-25icsa · cisa_csaf_otUS

    Successful exploitation of these vulnerabilities could crash the device, cause a buffer overflow, allow remote execution of arbitrary code, or allow access to sensitive information.

06

also known as (4)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducisa_csaf_otnvdweidmueller_psirtNVDCVE.orgMITRE
published 2020-03-11modified 2026-06-17
09

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan