CVE-2021-38458

CWE-743 documents3 sources
Severity
9.8CRITICAL
EPSS
0.8%
top 25.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Moxa Mxview Network Management SoftwareMoxa Mxview
Timeline
PublishedOct 12
Latest updateMay 24

Description

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDmoxa/mxview3.0 — 3.2.2

🔴Vulnerability Details

2
GHSA
GHSA-wvqc-pm32-wjgx: A path traversal vulnerability in the Moxa MXview Network Management software Versions 3↗2022-05-24
▶
CVEList
Moxa MXview Network Management Software↗2021-10-12
▶
CVE-2021-38458 (CRITICAL CVSS 9.8) | A path traversal vulnerability in t | cvebase.io