CVSS: 7.4EPSS: 0%CPEs: 40EXPL: 0CVE-2022-27048
https://notcve.org/view.php?id=CVE-2022-27048
A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower. Se ha detectado una vulnerabilidad en Moxa MGate que permite a un atacante llevar a cabo un ataque de tipo man-in-the-middle (MITM) en el dispositivo. Esto afecta a MGate MB3170 Series Firmware versiones 4.2 y anteriores. y MGate MB3270 Series Firmware versiones 4.2 y anteriores. y MGate MB3280 Series Firmware versiones 4.1 y anteriores. y MGate MB3480 Series Firmware versiones 3.2 y anteriores • https://www.moxa.com/en/support/product-support/security-advisory/mgate-mb3170-mb3270-mb3280-mb3480-protocol-gateways-vulnerability •
CVSS: 9.8EPSS: 0%CPEs: 10EXPL: 0CVE-2016-5804
https://notcve.org/view.php?id=CVE-2016-5804
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value. Moxa MGate MB3180 en versiones anteriores a 1.8, MGate MB3280 en versiones anteriores a 2.7, MGate MB3480 en versiones anteriores a 2.6, MGate MB3170 en versiones anteriores a 2.5 y MGate MB3270 en versiones anteriores a 2.7 usa encriptación débil, lo que permite a atacantes remotos eludir autenticación a través de una serie de conjeturas de fuerza-bruta para un valor de parámetro. • http://www.securityfocus.com/bid/91777 https://ics-cert.us-cert.gov/advisories/ICSA-16-196-02 • CWE-326: Inadequate Encryption Strength •