CVE-2021-38460: Moxa MXview Network Management Software
First published: Tue Oct 12 2021(Updated: )
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moxa MXview | >=3.0<=3.2.2 | |
| Moxa MXview Network Management Software: Versions 3.x to 3.2.2 |
Remedy
Moxa recommends users do the following: Upgrade to software package v3.2.4 or higher. Users should change their Windows password regularly and use a firewall. If users need to use a multiple-site function, Moxa recommends a firewall to block Port 8883. If users do not have this requirement, Moxa suggests using the firewall to assign the Accessible IP of MXview at the client site.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-38460?
CVE-2021-38460 is a path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2.
What is the severity of CVE-2021-38460?
The severity of CVE-2021-38460 is high with a CVSS score of 7.5.
How can an attacker exploit CVE-2021-38460?
An attacker can exploit CVE-2021-38460 by using path traversal techniques to create or overwrite critical files used to execute code.
What software versions are affected by CVE-2021-38460?
Versions 3.x to 3.2.2 of the Moxa MXview Network Management software are affected by CVE-2021-38460.
Is there a fix for CVE-2021-38460?
Yes, upgrading to a version higher than 3.2.2 of the Moxa MXview Network Management software will fix CVE-2021-38460.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/severity
- agent/last-modified-date
- agent/remedy
- agent/weakness
- agent/softwarecombine
- agent/title
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/moxa
- canonical/moxa mxview
- version/moxa mxview/3.0
- version/moxa mxview/3.2.2
- canonical/moxa mxview network management software: versions 3.x to 3.2.2