CVE-2021-4161 - OpenCVE

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:N/C:P/I:N/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Moxa	Mgate Mb3180 Mgate Mb3180 Firmware Mgate Mb3280 Mgate Mb3280 Firmware Mgate Mb3480 Mgate Mb3480 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:moxa:mgate_mb3180_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:moxa:mgate_mb3180:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:moxa:mgate_mb3280_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:moxa:mgate_mb3280:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:moxa:mgate_mb3480_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:moxa:mgate_mb3480:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01

History

No history.

MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2021-12-27T18:48:19.982800Z

Updated: 2024-09-16T19:24:13.483Z

Reserved: 2021-12-23T00:00:00

Link: CVE-2021-4161

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2021-12-27T19:15:08.803

Modified: 2022-01-07T18:11:08.640

Link: CVE-2021-4161

Redhat

No data.

{"containers": {"cna": {"affected": [{"platforms": ["NA"], "product": "MGate MB3180 Series", "vendor": "Moxa", "versions": [{"lessThan": "2.2", "status": "affected", "version": "all", "versionType": "custom"}]}, {"platforms": ["NA"], "product": "MGate MB3280 Series", "vendor": "Moxa", "versions": [{"status": "affected", "version": "all 4.1"}]}, {"platforms": ["NA"], "product": "MGate MB3480 Series", "vendor": "Moxa", "versions": [{"status": "affected", "version": "all 3.2"}]}], "credits": [{"lang": "en", "value": "Parul Sindhwad, Anurag M. Chevendra, and Dr. Faruk Kazi of CoE-CNDS Lab; VJTI; and Mumbai-INDIA reported this vulnerability to Moxa."}], "datePublic": "2021-12-23T00:00:00", "descriptions": [{"lang": "en", "value": "The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-319", "description": "CWE-319 Cleartext Transmission of Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-12-27T18:48:19", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01"}], "solutions": [{"lang": "en", "value": "Moxa has developed the following mitigations to address this vulnerability.\n\nEnable \u2018HTTPS\u2019 and disable the HTTP console function under \u2018Console Settings\u2019\nMoxa also recommends users refer to Tech Note: Moxa Security Hardening Guide for MGate MB3000 Series"}], "source": {"advisory": "ICSA-21-357-01", "discovery": "UNKNOWN"}, "title": "ICSA-21-357-01 Moxa MGate Protocol Gateways", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "DATE_PUBLIC": "2021-12-23T23:05:00.000Z", "ID": "CVE-2021-4161", "STATE": "PUBLIC", "TITLE": "ICSA-21-357-01 Moxa MGate Protocol Gateways"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "MGate MB3180 Series", "version": {"version_data": [{"platform": "NA", "version_affected": "<", "version_name": "all", "version_value": "2.2"}]}}, {"product_name": "MGate MB3280 Series", "version": {"version_data": [{"platform": "NA", "version_name": "all", "version_value": "4.1"}]}}, {"product_name": "MGate MB3480 Series", "version": {"version_data": [{"platform": "NA", "version_name": "all", "version_value": "3.2"}]}}]}, "vendor_name": "Moxa"}]}}, "credit": [{"lang": "eng", "value": "Parul Sindhwad, Anurag M. Chevendra, and Dr. Faruk Kazi of CoE-CNDS Lab; VJTI; and Mumbai-INDIA reported this vulnerability to Moxa."}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-319 Cleartext Transmission of Sensitive Information"}]}]}, "references": {"reference_data": [{"name": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01", "refsource": "MISC", "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01"}]}, "solution": [{"lang": "en", "value": "Moxa has developed the following mitigations to address this vulnerability.\n\nEnable \u2018HTTPS\u2019 and disable the HTTP console function under \u2018Console Settings\u2019\nMoxa also recommends users refer to Tech Note: Moxa Security Hardening Guide for MGate MB3000 Series"}], "source": {"advisory": "ICSA-21-357-01", "discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T17:16:04.411Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01"}]}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2021-4161", "datePublished": "2021-12-27T18:48:19.982800Z", "dateReserved": "2021-12-23T00:00:00", "dateUpdated": "2024-09-16T19:24:13.483Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:moxa:mgate_mb3180_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6E11DB5E-B971-4419-9444-1CEF54F7CB95", "versionEndIncluding": "2.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:moxa:mgate_mb3180:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF77C838-FB6C-4A55-B5E5-FA4DDE11F3BA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:moxa:mgate_mb3280_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FE7913FB-83D1-44A5-8DE0-350177265BA4", "versionEndIncluding": "4.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:moxa:mgate_mb3280:-:*:*:*:*:*:*:*", "matchCriteriaId": "ECB8238C-7B72-4EEB-A656-090B3E8978D4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:moxa:mgate_mb3480_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1A17484F-2EE1-45FD-8341-EDB01F907AA9", "versionEndIncluding": "3.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:moxa:mgate_mb3480:-:*:*:*:*:*:*:*", "matchCriteriaId": "3BEC8167-9069-4DA5-9281-C43AD60CD675", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server."}, {"lang": "es", "value": "Los productos afectados contienen un firmware vulnerable, lo que podr\u00eda permitir a un atacante husmear el tr\u00e1fico y descifrar los datos de las credenciales de acceso. Esto podr\u00eda dar a un atacante derechos de administrador mediante el servidor web HTTP"}], "id": "CVE-2021-4161", "lastModified": "2022-01-07T18:11:08.640", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}]}, "published": "2021-12-27T19:15:08.803", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-319"}], "source": "ics-cert@hq.dhs.gov", "type": "Primary"}]}