CVE-2021-4161: ICSA-21-357-01 Moxa MGate Protocol Gateways
First published: Thu Dec 23 2021(Updated: )
The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.
Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moxa Mgate Mb3180 Firmware | <=2.2 | |
| MOXA Mgate MB3180 | ||
| Moxa Mgate Mb3280 Firmware | <=4.1 | |
| Moxa Mgate Mb3280 | ||
| Moxa Mgate Mb3480 Firmware | <=3.2 | |
| Moxa Mgate Mb3480 | ||
| Moxa MGate MB3180 Series: Firmware Version 2.2 or lower | ||
| Moxa MGate MB3280 Series: Firmware Version 4.1 or lower | ||
| Moxa MGate MB3480 Series: Firmware Version 3.2 or lower | ||
| All of | ||
| Moxa Mgate Mb3180 Firmware | <=2.2 | |
| MOXA Mgate MB3180 | ||
| All of | ||
| Moxa Mgate Mb3280 Firmware | <=4.1 | |
| Moxa Mgate Mb3280 | ||
| All of | ||
| Moxa Mgate Mb3480 Firmware | <=3.2 | |
| Moxa Mgate Mb3480 |
Remedy
Moxa has developed the following mitigations to address this vulnerability. Enable ‘HTTPS’ and disable the HTTP console function under ‘Console Settings’ Moxa also recommends users refer to Tech Note: Moxa Security Hardening Guide for MGate MB3000 Series
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-4161?
CVE-2021-4161 is a vulnerability in the affected products' firmware that could allow an attacker to sniff the traffic and decrypt login credential details.
How does CVE-2021-4161 impact the affected products?
CVE-2021-4161 could give an attacker admin rights through the HTTP web server.
Which products are affected by CVE-2021-4161?
The Moxa Mgate Mb3180 Firmware up to version 2.2, Moxa Mgate Mb3280 Firmware up to version 4.1, and Moxa Mgate Mb3480 Firmware up to version 3.2 are affected.
What is the severity of CVE-2021-4161?
CVE-2021-4161 has a severity rating of 7.5, which is considered critical.
How can I mitigate CVE-2021-4161?
To mitigate CVE-2021-4161, it is recommended to update the firmware of the affected products to a secure version.
Where can I find more information about CVE-2021-4161?
You can find more information about CVE-2021-4161 at the following reference: [link](https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01).
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/title
- agent/author
- agent/description
- agent/first-publish-date
- agent/references
- agent/severity
- agent/event
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/moxa
- canonical/moxa mgate mb3180 firmware
- version/moxa mgate mb3180 firmware/2.2
- canonical/moxa mgate mb3180
- canonical/moxa mgate mb3280 firmware
- version/moxa mgate mb3280 firmware/4.1
- canonical/moxa mgate mb3280
- canonical/moxa mgate mb3480 firmware
- version/moxa mgate mb3480 firmware/3.2
- canonical/moxa mgate mb3480
- canonical/moxa mgate mb3180 series: firmware version 2.2 or lower
- canonical/moxa mgate mb3280 series: firmware version 4.1 or lower
- canonical/moxa mgate mb3480 series: firmware version 3.2 or lower