01 Record
CVE-2021-4161
ICSA-21-357-01 Moxa MGate Protocol Gateways
CriticalPUBLISHEDCNA: icscert
CNA base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
02 Description
ICSA-21-357-01 Moxa MGate Protocol Gateways
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 0.70% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 53.0% of scored records. A rank, not a probability.
- NVD base score
- 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2021-12-27 18:48Z4 YR AGO
- Last updated
- 2024-09-16 19:24Z2 YR AGO
- Reserved
- 2021-12-23
- Assigning CNA
- icscert
- Record state
- PUBLISHED
- Severity
- Critical (CVSS 9.8)
- CNA CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-319Cleartext Transmission of Sensitive InformationBase
- Data version
- 5.1
- Document digest
- 8d0791cb8fe4af15c8325ffa361b37f1ac2cf3bab40a7abe5d52167b9aa86906
05 Affected products
VendorProductVersionsPlatforms
06 References
07 Remediation
Moxa has developed the following mitigations to address this vulnerability. Enable ‘HTTPS’ and disable the HTTP console function under ‘Console Settings’ Moxa also recommends users refer to Tech Note: Moxa Security Hardening Guide for MGate MB3000 Series