CVE-2019-9103: Infoleak
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker can access sensitive information (e.g., conduct username disclosure attacks) on the built-in WEB-service without authorization.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-9103?
CVE-2019-9103 has been classified as a medium severity vulnerability.
How do I fix CVE-2019-9103?
To fix CVE-2019-9103, you should update the affected devices to the latest firmware version as recommended by Moxa.
Which devices are affected by CVE-2019-9103?
CVE-2019-9103 affects Moxa MGate MB3170, MB3270, MB3180, MB3280, MB3480, and MB3660 devices based on specific firmware versions.
What type of attack is possible due to CVE-2019-9103?
An attacker can exploit CVE-2019-9103 to conduct username disclosure attacks through the built-in web service.
What is the potential impact of CVE-2019-9103?
The potential impact of CVE-2019-9103 is unauthorized access to sensitive information, leading to privacy and security concerns.