CVE-2016-5804
Critical
Description
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.
SeverityCritical
CVSS9.8
Exploit probability—
ProductMoxa Mgate Mb3180 Firmware
PublishedJul 15, 2016
First seenJul 15, 2016
How to fix
Update
- moxa mgate_mb3180_firmware1.8 or later
- moxa mgate_mb3280_firmware2.7 or later
- moxa mgate_mb3480_firmware2.6 or later
- moxa mgate_mb3170_firmware2.5 or later
- moxa mgate_mb3270_firmware2.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moxa mgate_mb3180_firmware | v < 1.8 | 1.8 |
| moxa mgate_mb3280_firmware | v < 2.7 | 2.7 |
| moxa mgate_mb3480_firmware | v < 2.6 | 2.6 |
| moxa mgate_mb3170_firmware | v < 2.5 | 2.5 |
| moxa mgate_mb3270_firmware | v < 2.7 | 2.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.