Moxa Mxview Series vulnerabilities

CVE-2021-40390 [CRITICAL] CWE-798 CVE-2021-40390: An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Se An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can lead to unauthorized access. An attacker can send an HTTP request to trigger this vulnerability.

CVE-2021-40392 [HIGH] CWE-319 CVE-2021-40392: An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView S An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to exploit this vulnerability.