mb3660_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/mb3660_firmware/ Sun, 26 Feb 2023 06:34:50 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png mb3660_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/mb3660_firmware/ 32 32 CVE-2019-9095 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9095/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9095/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access.

The post CVE-2019-9095 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access.

The post CVE-2019-9095 appeared first on CVE Vulnerability.

]]> CVE-2019-9096 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9096/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9096/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Insufficient password requirements for the MGate web application may allow an attacker to gain access by brute-forcing account passwords.

The post CVE-2019-9096 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Insufficient password requirements for the MGate web application may allow an attacker to gain access by brute-forcing account passwords.

The post CVE-2019-9096 appeared first on CVE Vulnerability.

]]> CVE-2019-9097 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9097/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9097/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A high rate of transit traffic may cause a low-memory condition and a denial of service.

The post CVE-2019-9097 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A high rate of transit traffic may cause a low-memory condition and a denial of service.

The post CVE-2019-9097 appeared first on CVE Vulnerability.

]]> CVE-2019-9098 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9098/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9098/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An Integer overflow in the built-in web server allows remote attackers to initiate DoS.

The post CVE-2019-9098 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An Integer overflow in the built-in web server allows remote attackers to initiate DoS.

The post CVE-2019-9098 appeared first on CVE Vulnerability.

]]> CVE-2019-9099 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9099/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9099/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A Buffer overflow in the built-in web server allows remote attackers to initiate DoS, and probably to execute arbitrary code (issue 1 of 2).

The post CVE-2019-9099 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A Buffer overflow in the built-in web server allows remote attackers to initiate DoS, and probably to execute arbitrary code (issue 1 of 2).

The post CVE-2019-9099 appeared first on CVE Vulnerability.

]]> CVE-2019-9101 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9101/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9101/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Sensitive information is sent to the web server in cleartext, which may allow an attacker to discover the credentials if they are able to observe traffic between […]

The post CVE-2019-9101 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Sensitive information is sent to the web server in cleartext, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server.

The post CVE-2019-9101 appeared first on CVE Vulnerability.

]]> CVE-2019-9102 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9102/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9102/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism.

The post CVE-2019-9102 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism.

The post CVE-2019-9102 appeared first on CVE Vulnerability.

]]> CVE-2019-9103 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9103/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9103/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker can access sensitive information (e.g., conduct username disclosure attacks) on the built-in WEB-service without authorization.

The post CVE-2019-9103 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker can access sensitive information (e.g., conduct username disclosure attacks) on the built-in WEB-service without authorization.

The post CVE-2019-9103 appeared first on CVE Vulnerability.

]]> CVE-2019-9104 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9104/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9104/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The application’s configuration file contains parameters that represent passwords in cleartext.

The post CVE-2019-9104 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The application’s configuration file contains parameters that represent passwords in cleartext.

The post CVE-2019-9104 appeared first on CVE Vulnerability.

]]>