CVE-2021-4161: ICSA-21-357-01 Moxa MGate Protocol Gateways

Q: What is CVE-2021-4161?

CVE-2021-4161 is a vulnerability in the affected products' firmware that could allow an attacker to sniff the traffic and decrypt login credential details.

Q: How does CVE-2021-4161 impact the affected products?

CVE-2021-4161 could give an attacker admin rights through the HTTP web server.

Q: Which products are affected by CVE-2021-4161?

The Moxa Mgate Mb3180 Firmware up to version 2.2, Moxa Mgate Mb3280 Firmware up to version 4.1, and Moxa Mgate Mb3480 Firmware up to version 3.2 are affected.

Q: What is the severity of CVE-2021-4161?

CVE-2021-4161 has a severity rating of 7.5, which is considered critical.

Q: How can I mitigate CVE-2021-4161?

To mitigate CVE-2021-4161, it is recommended to update the firmware of the affected products to a secure version.

Q: Where can I find more information about CVE-2021-4161?

You can find more information about CVE-2021-4161 at the following reference: [link](https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01).

Published Dec 27, 2021

Updated

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.

Affected Software

15 affected components

MOXA MGate MB3180 Series: Firmware Version 2.2 or lower

MOXA MGate MB3280 Series: Firmware Version 4.1 or lower

MOXA MGate MB3480 Series: Firmware Version 3.2 or lower

All of the following

MOXA Mgate Mb3180 Firmware<=2.2

MOXA Mgate MB3180

All of the following

MOXA Mgate Mb3280 Firmware<=4.1

MOXA MGate MB3280

All of the following

MOXA Mgate Mb3480 Firmware<=3.2

MOXA MGate MB3480

MOXA Mgate Mb3180 Firmware<=2.2

MOXA Mgate MB3180

MOXA Mgate Mb3280 Firmware<=4.1

MOXA MGate MB3280

MOXA Mgate Mb3480 Firmware<=3.2

MOXA MGate MB3480

Remediation

Information

Moxa has developed the following mitigations to address this vulnerability. Enable ‘HTTPS’ and disable the HTTP console function under ‘Console Settings’ Moxa also recommends users refer to Tech Note: Moxa Security Hardening Guide for MGate MB3000 Series

Event History

Dec 27, 2021

CVE Published

via MITRE·06:48 PM

Data Sourced

via MITRE·06:48 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-21-357-01

Frequently Asked Questions

What is CVE-2021-4161?

CVE-2021-4161 is a vulnerability in the affected products' firmware that could allow an attacker to sniff the traffic and decrypt login credential details.

How does CVE-2021-4161 impact the affected products?

CVE-2021-4161 could give an attacker admin rights through the HTTP web server.

Which products are affected by CVE-2021-4161?

The Moxa Mgate Mb3180 Firmware up to version 2.2, Moxa Mgate Mb3280 Firmware up to version 4.1, and Moxa Mgate Mb3480 Firmware up to version 3.2 are affected.

What is the severity of CVE-2021-4161?

CVE-2021-4161 has a severity rating of 7.5, which is considered critical.

How can I mitigate CVE-2021-4161?

To mitigate CVE-2021-4161, it is recommended to update the firmware of the affected products to a secure version.

Where can I find more information about CVE-2021-4161?

You can find more information about CVE-2021-4161 at the following reference: [link](https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01).

CVE-2021-4161: ICSA-21-357-01 Moxa MGate Protocol Gateways

Affected Software

Remediation

Information

Event History

Parent advisories

Frequently Asked Questions

What is CVE-2021-4161?

How does CVE-2021-4161 impact the affected products?

Which products are affected by CVE-2021-4161?

What is the severity of CVE-2021-4161?

How can I mitigate CVE-2021-4161?

Where can I find more information about CVE-2021-4161?

Company

Resources

Contact