CVE-2021-38452: Moxa MXview Network Management Software
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Moxa MXview Network Management Softwareto a version that resolves this vulnerability.Fixed in 3.2.4 - Compensating control
If users do not have a requirement to access MXview from their client site, use a firewall to assign the Accessible IP of MXview at the client site.
- Compensating control
If users need to use a multiple-site function, use a firewall to block Port 8883.
- Operational
Change the Windows password regularly and use a firewall.
Event History
Frequently Asked Questions
What is CVE-2021-38452?
CVE-2021-38452 is a path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2.
What is the severity of CVE-2021-38452?
CVE-2021-38452 has a severity rating of 9.1 (critical).
Which software versions are affected by CVE-2021-38452?
The Moxa MXview Network Management software Versions 3.x to 3.2.2 are affected by CVE-2021-38452.
How can an attacker exploit CVE-2021-38452?
An attacker can exploit CVE-2021-38452 by creating or overwriting critical files used to execute code, such as programs or libraries.
Is there a fix available for CVE-2021-38452?
It is recommended to update to a version of Moxa MXview Network Management software that is not affected by CVE-2021-38452.