CVE-2021-38460 — Unprotected Transport of Credentials in Mxview Network Management Software

CWE-523 — Unprotected Transport of CredentialsCWE-22 — Path TraversalCWE-522 — Insufficiently Protected Credentials3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.6%
top 29.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Moxa Mxview Network Management SoftwareMoxa Mxview
Timeline
PublishedOct 12
Latest updateMay 24

Description

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDmoxa/mxview3.0 — 3.2.2

🔴Vulnerability Details

2
GHSA
GHSA-j57w-g5v3-32qm: A path traversal vulnerability in the Moxa MXview Network Management software Versions 3↗2022-05-24
▶
CVEList
Moxa MXview Network Management Software↗2021-10-12
▶
CVE-2021-38460 — Unprotected Transport of Credentials | cvebase