CVEvulnerability
CVE-2022-27048
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-04-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Description
A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.
Affected configurations
• moxa mgate mb3170i firmware (<= 4.2)
• moxa mgate mb3170i-t firmware (<= 4.2)
• moxa mgate mb3170-m-st firmware (<= 4.2)
• moxa mgate mb3170-m-sc-t firmware (<= 4.2)
• moxa mgate mb3170 firmware (<= 4.2)
• moxa mgate mb3170-t firmware (<= 4.2)
• moxa mgate mb3170-m-sc firmware (<= 4.2)
• moxa mgate mb3170i-s-sc firmware (<= 4.2)
• moxa mgate mb3270i firmware (<= 4.2)
• moxa mgate mb3270i-t firmware (<= 4.2)
• moxa mgate mb3170i-m-sc firmware (<= 4.2)
• moxa mgate mb3170-s-sc-t firmware (<= 4.2)
• moxa mgate mb3170i-m-sc-t firmware (<= 4.2)
• moxa mgate mb3270 firmware (<= 4.2)
• moxa mgate mb3270-t firmware (<= 4.2)
• moxa mgate mb3170-s-sc firmware (<= 4.2)
• moxa mgate mb3170-m-st-t firmware (<= 4.2)
• moxa mgate mb3170i-s-sc-t firmware (<= 4.2)
• moxa mgate mb3280 firmware (<= 4.1)
• moxa mgate mb3480 firmware (<= 3.2)