Vulnerabilities > Moxa

DATE CVE VULNERABILITY TITLE RISK
2021-06-18 CVE-2021-33823 Resource Exhaustion vulnerability in Moxa Mgate Mb3180 Firmware 2.1
An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012.
network
low complexity
moxa CWE-400
5.0
2021-06-18 CVE-2021-33824 Resource Exhaustion vulnerability in Moxa Mgate Mb3180 Firmware 2.1
An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012.
network
low complexity
moxa CWE-400
5.0
2021-05-14 CVE-2020-27184 Inadequate Encryption Strength vulnerability in Moxa products
The NPort IA5000A Series devices use Telnet as one of the network device management services.
network
moxa CWE-326
4.3
2021-05-14 CVE-2020-27185 Cleartext Transmission of Sensitive Information vulnerability in Moxa products
Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices.
network
low complexity
moxa CWE-319
5.0
2021-05-14 CVE-2020-27149 Unspecified vulnerability in Moxa products
By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed.
network
low complexity
moxa
4.0
2021-05-14 CVE-2020-27150 Unspecified vulnerability in Moxa products
In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the system and other sensitive data in the original form if “Pre-shared key” doesn’t set.
network
low complexity
moxa
5.0
2021-05-10 CVE-2021-25845 Null Pointer Dereference vulnerability in Moxa products
Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet.
network
low complexity
moxa CWE-476
5.0
2021-05-10 CVE-2021-25846 Integer Underflow (Wrap OR Wraparound) vulnerability in Moxa products
Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet.
network
low complexity
moxa CWE-191
7.8
2021-05-10 CVE-2021-25847 Out-Of-Bounds Read vulnerability in Moxa products
Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet.
network
low complexity
moxa CWE-125
8.5
2021-05-10 CVE-2021-25848 Out-Of-Bounds Read vulnerability in Moxa products
Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet.
network
low complexity
moxa CWE-125
8.5