CVE-2022-27048
High
Description
A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.
SeverityHigh
CVSS7.4
Exploit probability—
ProductMoxa Mgate Mb3170i Firmware
PublishedApr 15, 2022
First seenApr 15, 2022
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moxa mgate_mb3170i_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170i-t_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170-m-st_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170-m-sc-t_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170-t_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170-m-sc_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170i-s-sc_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3270i_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3270i-t_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170i-m-sc_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170-s-sc-t_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170i-m-sc-t_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3270_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3270-t_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170-s-sc_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170-m-st-t_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3170i-s-sc-t_firmware | v ≤ 4.2 | — |
| moxa mgate_mb3280_firmware | v ≤ 4.1 | — |
| moxa mgate_mb3480_firmware | v ≤ 3.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.