Vulnerability Description
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Mgate Mb3180 Firmware | < 1.8 |
| Moxa | Mgate Mb3180 | - |
| Moxa | Mgate Mb3280 Firmware | < 2.7 |
| Moxa | Mgate Mb3280 | - |
| Moxa | Mgate Mb3480 Firmware | < 2.6 |
| Moxa | Mgate Mb3480 | - |
| Moxa | Mgate Mb3170 Firmware | < 2.5 |
| Moxa | Mgate Mb3170 | - |
| Moxa | Mgate Mb3270 Firmware | < 2.7 |
| Moxa | Mgate Mb3270 | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/91777Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-196-02Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/91777Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-196-02Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2016-5804?
CVE-2016-5804 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authen...
How severe is CVE-2016-5804?
CVE-2016-5804 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-5804?
Check the references section above for vendor advisories and patch information. Affected products include: Moxa Mgate Mb3180 Firmware, Moxa Mgate Mb3180, Moxa Mgate Mb3280 Firmware, Moxa Mgate Mb3280, Moxa Mgate Mb3480 Firmware.