CVE-2016-5804

CRITICAL

9.8

Description

Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie7/15/2016

Derniere modification4/12/2025

Sourcenvd

Observations honeypot0

Produits affectes

moxa:mgate_mb3170moxa:mgate_mb3170_firmwaremoxa:mgate_mb3180moxa:mgate_mb3180_firmwaremoxa:mgate_mb3270moxa:mgate_mb3270_firmwaremoxa:mgate_mb3280moxa:mgate_mb3280_firmwaremoxa:mgate_mb3480moxa:mgate_mb3480_firmware

Faiblesses (CWE)

CWE-326

References

http://www.securityfocus.com/bid/91777(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSA-16-196-02(ics-cert@hq.dhs.gov)

http://www.securityfocus.com/bid/91777(af854a3a-2127-422b-91ae-364da2661108)

https://ics-cert.us-cert.gov/advisories/ICSA-16-196-02(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.