CVE-2021-33824: High severity moxa mgate mb3180 firmware vulnerability

Published Jun 18, 2021

Updated

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service.

Affected Software

2 affected components

MOXA Mgate Mb3180 Firmware=2.1-build_18113012

MOXA Mgate MB3180

Event History

Jun 18, 2021

CVE Published

via MITRE·07:08 PM

Data Sourced

via MITRE·07:08 PM

Description

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2021-33824.

What is the title of the vulnerability?

The title of the vulnerability is 'An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttpt…'.

How does this vulnerability affect the MOXA Mgate MB3180 firmware?

This vulnerability affects MOXA Mgate MB3180 firmware version 2.1 Build 18113012.

What is the severity of CVE-2021-33824?

The severity of CVE-2021-33824 is high with a CVSS score of 7.5.

How can attackers exploit this vulnerability?

Attackers can exploit this vulnerability by using the slowhttptest tool to send incomplete HTTP requests, causing a denial-of-service condition on the web server.