CVE-2021-4161 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2021-4161

Analyzed

More Info Official Page

Source-ics-cert@hq.dhs.gov

Published At-27 Dec, 2021 | 19:15

Updated At-07 Jan, 2022 | 18:11

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Secondary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

>>mgate_mb3180_firmware>>Versions up to 2.2(inclusive)

cpe:2.3:o:moxa:mgate_mb3180_firmware:*:*:*:*:*:*:*:*

>>mgate_mb3180>>-

cpe:2.3:h:moxa:mgate_mb3180:-:*:*:*:*:*:*:*

>>mgate_mb3280_firmware>>Versions up to 4.1(inclusive)

cpe:2.3:o:moxa:mgate_mb3280_firmware:*:*:*:*:*:*:*:*

>>mgate_mb3280>>-

cpe:2.3:h:moxa:mgate_mb3280:-:*:*:*:*:*:*:*

>>mgate_mb3480_firmware>>Versions up to 3.2(inclusive)

cpe:2.3:o:moxa:mgate_mb3480_firmware:*:*:*:*:*:*:*:*

>>mgate_mb3480>>-

cpe:2.3:h:moxa:mgate_mb3480:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-319	Primary	ics-cert@hq.dhs.gov

CWE ID: CWE-319

Type: Primary

Source: ics-cert@hq.dhs.gov

References

Hyperlink	Source	Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01	ics-cert@hq.dhs.gov	Third Party Advisory US Government Resource

Hyperlink: https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01

Source: ics-cert@hq.dhs.gov

Resource:

Third Party Advisory

US Government Resource