CVE-2022-27048

Published: Apr 15, 2022Modified: Nov 21, 2024

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: NVD

Description

A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.

Affected (20)

Moxa

20 products

Mgate Mb3170i Firmware

Mgate Mb3170i T Firmware

Mgate Mb3170 M St Firmware

Mgate Mb3170 M Sc T Firmware

Mgate Mb3170 Firmware

Mgate Mb3170 T Firmware

Mgate Mb3170 M Sc Firmware

Mgate Mb3170i S Sc Firmware

Mgate Mb3270i Firmware

Mgate Mb3270i T Firmware

Mgate Mb3170i M Sc Firmware

Mgate Mb3170 S Sc T Firmware

Mgate Mb3170i M Sc T Firmware

Mgate Mb3270 Firmware

Mgate Mb3270 T Firmware

Mgate Mb3170 S Sc Firmware

Mgate Mb3170 M St T Firmware

Mgate Mb3170i S Sc T Firmware

Mgate Mb3280 Firmware

Mgate Mb3480 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170i Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170i	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170i T Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170i T	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170 M St Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170 M St	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170 M Sc T Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170 M Sc T	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170 Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170 T Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170 T	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170 M Sc Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170 M Sc	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170i S Sc Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170i S Sc	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3270i Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3270i	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3270i T Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3270i T	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170i M Sc Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170i M Sc	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170 S Sc T Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170 S Sc T	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170i M Sc T Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170i M Sc T	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3270 Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3270	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3270 T Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3270 T	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170 S Sc Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170 S Sc	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170 M St T Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170 M St T	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3170i S Sc T Firmware	Up to 4.2

Running on/with	Platform Versions
Moxa Mgate Mb3170i S Sc T	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3280 Firmware	Up to 4.1

Running on/with	Platform Versions
Moxa Mgate Mb3280	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Mgate Mb3480 Firmware	Up to 3.2

Running on/with	Platform Versions
Moxa Mgate Mb3480	All versions

References (2)

https://www.moxa.com/en/support/product-support/security-advisory/mgate-mb3170-mb3270-mb3280-mb3480-protocol-gateways-vulnerability

Source: cve@mitre.org

Vendor Advisory

https://www.moxa.com/en/support/product-support/security-advisory/mgate-mb3170-mb3270-mb3280-mb3480-protocol-gateways-vulnerability

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.