Vulnerability Details CVE-2019-9099
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A Buffer overflow in the built-in web server allows remote attackers to initiate DoS, and probably to execute arbitrary code (issue 1 of 2).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.07
EPSS Ranking 91.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.5
References
- https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilities
- https://www.us-cert.gov/ics/advisories/icsa-20-056-01
- https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilities
- https://www.us-cert.gov/ics/advisories/icsa-20-056-01
Products affected by CVE-2019-9099
-
cpe:2.3:h:moxa:mb3170:-
-
cpe:2.3:h:moxa:mb3180:-
-
cpe:2.3:h:moxa:mb3270:-
-
cpe:2.3:h:moxa:mb3280:-
-
cpe:2.3:h:moxa:mb3480:-
-
cpe:2.3:h:moxa:mb3660:-
-
cpe:2.3:o:moxa:mb3170_firmware:4.0
-
cpe:2.3:o:moxa:mb3180_firmware:2.0
-
cpe:2.3:o:moxa:mb3270_firmware:4.0
-
cpe:2.3:o:moxa:mb3280_firmware:3.0
-
cpe:2.3:o:moxa:mb3480_firmware:3.0
-
cpe:2.3:o:moxa:mb3660_firmware:2.2