title: ICSA-21-357-01 Moxa MGate Protocol Gateways
description: The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.
problem types: CWE-319 Cleartext Transmission of Sensitive Information
affected:
{
platforms: NA
product: MGate MB3180 Series
vendor: Moxa
versions:
lessThan: 2.2, status: affected, version: all, versionType: custom
}
{
platforms: NA
product: MGate MB3280 Series
vendor: Moxa
versions:
status: affected, version: all 4.1
}
{
platforms: NA
product: MGate MB3480 Series
vendor: Moxa
versions:
status: affected, version: all 3.2
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: Moxa has developed the following mitigations to address this vulnerability.
Enable ‘HTTPS’ and disable the HTTP console function under ‘Console Settings’
Moxa also recommends users refer to Tech Note: Moxa Security Hardening Guide for MGate MB3000 Series