CVE-2021-38454: Moxa MXview Network Management Software
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Moxa MXview Network Management softwareto a version that resolves this vulnerability.Fixed in 3.2.4 - Compensating control
Use a firewall to restrict access to MXview from the client site by assigning the MXview Accessible IP at the client site.
- Compensating control
If multiple-site function is needed, use a firewall to block Port 8883.
- Operational
Change the Windows password regularly.
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-38454.
What is the title of the vulnerability?
The title of the vulnerability is 'A path traversal vulnerability in the Moxa MXview Network Management software'.
What is the affected software?
The affected software is Moxa MXview Network Management software versions 3.x to 3.2.2.
What is the severity of CVE-2021-38454?
The severity of CVE-2021-38454 is critical.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by creating or overwriting critical files used to execute code.