CVE-2022-27048

published 2022-04-15

CVE-2022-27048: A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate…

Priority P3 44 high 7.4 CVSS 3.1

AV N AC H PR N UI N S U C H I H A N

A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.

Affected

20 ranges

Vendor	Product	Version range	Fixed in
moxa	mgate_mb3170-m-sc-t_firmware	<= 4.2	—
moxa	mgate_mb3170-m-sc_firmware	<= 4.2	—
moxa	mgate_mb3170-m-st-t_firmware	<= 4.2	—
moxa	mgate_mb3170-m-st_firmware	<= 4.2	—
moxa	mgate_mb3170-s-sc-t_firmware	<= 4.2	—
moxa	mgate_mb3170-s-sc_firmware	<= 4.2	—
moxa	mgate_mb3170-t_firmware	<= 4.2	—
moxa	mgate_mb3170_firmware	<= 4.2	—
moxa	mgate_mb3170i-m-sc-t_firmware	<= 4.2	—
moxa	mgate_mb3170i-m-sc_firmware	<= 4.2	—
moxa	mgate_mb3170i-s-sc-t_firmware	<= 4.2	—
moxa	mgate_mb3170i-s-sc_firmware	<= 4.2	—
moxa	mgate_mb3170i-t_firmware	<= 4.2	—
moxa	mgate_mb3170i_firmware	<= 4.2	—
moxa	mgate_mb3270-t_firmware	<= 4.2	—
moxa	mgate_mb3270_firmware	<= 4.2	—
moxa	mgate_mb3270i-t_firmware	<= 4.2	—
moxa	mgate_mb3270i_firmware	<= 4.2	—
moxa	mgate_mb3280_firmware	<= 4.1	—
moxa	mgate_mb3480_firmware	<= 3.2	—

CVSS provenance

nvd v3.1 7.4 HIGH CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

nvd v2.0 5.8 MEDIUM AV:N/AC:M/Au:N/C:P/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.