CVEvulnerability

CVE-2016-5804

9.8 CRITICAL Published 2016-07-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-07-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-326

Description

Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.

Affected configurations

• moxa mgate mb3180 firmware (< 1.8) • moxa mgate mb3280 firmware (< 2.7) • moxa mgate mb3480 firmware (< 2.6) • moxa mgate mb3170 firmware (< 2.5) • moxa mgate mb3270 firmware (< 2.7)

Related

Weakness · CWE (1)

  • CWE-326 Inadequate Encryption Strength weakness

References