CVE-2021-38460: Moxa MXview Network Management Software
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Moxa MXview Network Management Softwareto a version that resolves this vulnerability.Fixed in 3.2.4 - Compensating control
Use a firewall to allow only the MXview Accessible IP from the client site (if users do not have the path traversal requirement).
- Compensating control
If using a multiple-site function, use a firewall to block Port 8883.
- Operational
Change the Windows password regularly.
Event History
Frequently Asked Questions
What is CVE-2021-38460?
CVE-2021-38460 is a path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2.
What is the severity of CVE-2021-38460?
The severity of CVE-2021-38460 is high with a CVSS score of 7.5.
How can an attacker exploit CVE-2021-38460?
An attacker can exploit CVE-2021-38460 by using path traversal techniques to create or overwrite critical files used to execute code.
What software versions are affected by CVE-2021-38460?
Versions 3.x to 3.2.2 of the Moxa MXview Network Management software are affected by CVE-2021-38460.
Is there a fix for CVE-2021-38460?
Yes, upgrading to a version higher than 3.2.2 of the Moxa MXview Network Management software will fix CVE-2021-38460.