CVE-2022-27048

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 15-04-2022 09:15

Last modified: - 25-04-2022 08:43

Total changes: - 3

Description

A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

High

Attack complexity

Network

Attack vector

None

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

7.4

Base score

2.2

5.2

Exploitability score

Impact score

Verification logic

AND

vendor=moxa AND product=mgate_mb3170i_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170i AND version=-

AND

vendor=moxa AND product=mgate_mb3170i-t_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170i-t AND version=-

AND

vendor=moxa AND product=mgate_mb3170-m-st_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170-m-st AND version=-

AND

vendor=moxa AND product=mgate_mb3170-m-sc-t_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170-m-sc-t AND version=-

AND

vendor=moxa AND product=mgate_mb3170_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170 AND version=-

AND

vendor=moxa AND product=mgate_mb3170-t_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170-t AND version=-

AND

vendor=moxa AND product=mgate_mb3170-m-sc_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170-m-sc AND version=-

AND

vendor=moxa AND product=mgate_mb3170i-s-sc_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170i-s-sc AND version=-

AND

vendor=moxa AND product=mgate_mb3270i_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3270i AND version=-

AND

vendor=moxa AND product=mgate_mb3270i-t_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3270i-t AND version=-

AND

vendor=moxa AND product=mgate_mb3170i-m-sc_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170i-m-sc AND version=-

AND

vendor=moxa AND product=mgate_mb3170-s-sc-t_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170-s-sc-t AND version=-

AND

vendor=moxa AND product=mgate_mb3170i-m-sc-t_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170i-m-sc-t AND version=-

AND

vendor=moxa AND product=mgate_mb3270_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3270 AND version=-

AND

vendor=moxa AND product=mgate_mb3270-t_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3270-t AND version=-

AND

vendor=moxa AND product=mgate_mb3170-s-sc_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170-s-sc AND version=-

AND

vendor=moxa AND product=mgate_mb3170-m-st-t_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170-m-st-t AND version=-

AND

vendor=moxa AND product=mgate_mb3170i-s-sc-t_firmware AND versionEndIncluding=4.2

vendor=moxa AND product=mgate_mb3170i-s-sc-t AND version=-

AND

vendor=moxa AND product=mgate_mb3280_firmware AND versionEndIncluding=4.1

vendor=moxa AND product=mgate_mb3280 AND version=-

AND

vendor=moxa AND product=mgate_mb3480_firmware AND versionEndIncluding=3.2

vendor=moxa AND product=mgate_mb3480 AND version=-

Reference

https://www.moxa.com/en/support/product-support/security-advisory/mgate-mb3170-mb3270-mb3280-mb3480-protocol-gateways-vulnerability

Keywords

CVE-2022-27048

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-27048

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures