CVE-2016-5804: Weak Encryption
First published: Fri Jul 15 2016(Updated: )
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moxa Mgate MB3180 Firmware | <1.8 | |
| Moxa Mgate MB3180 Firmware | ||
| Moxa Mb3280 Firmware | <2.7 | |
| Moxa Mgate MB3280 Firmware | ||
| Moxa MB3480 | <2.6 | |
| Moxa Mgate Mb3480 Firmware | ||
| Moxa Mgate MB3170-T Firmware | <2.5 | |
| Moxa MB3170 | ||
| Moxa Mgate MB3270 Firmware | <2.7 | |
| Moxa Mgate MB3270 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-5804?
CVE-2016-5804 is considered to have a high severity rating due to the potential for remote authentication bypass.
How do I fix CVE-2016-5804?
To mitigate CVE-2016-5804, update your Moxa MGate firmware to the latest version, specifically versions 1.8 or higher for the MB3180, 2.7 or higher for the MB3280, 2.6 or higher for the MB3480, 2.5 or higher for the MB3170, and 2.7 or higher for the MB3270.
What devices are affected by CVE-2016-5804?
Devices affected by CVE-2016-5804 include Moxa MGate models MB3180, MB3280, MB3480, MB3170, and MB3270 running outdated firmware.
What type of vulnerability is CVE-2016-5804?
CVE-2016-5804 is a security vulnerability that utilizes weak encryption allowing attackers to bypass authentication.
Can I use Moxa MGate devices that are affected by CVE-2016-5804 securely?
To use Moxa MGate devices securely, it is essential to apply the necessary firmware updates to remediate CVE-2016-5804.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/moxa
- canonical/moxa mgate mb3180 firmware
- canonical/moxa mb3280 firmware
- canonical/moxa mgate mb3280 firmware
- canonical/moxa mb3480
- canonical/moxa mgate mb3480 firmware
- canonical/moxa mgate mb3170-t firmware
- canonical/moxa mb3170
- canonical/moxa mgate mb3270 firmware