GCVE - cpe:2.3:o:moxa:mgate_mb3480_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:moxa:mgate_mb3480_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Moxa (`98e7f712-aaf6-5b76-a35e-6cb93ba6791f`)
Product	Mgate Mb3480 Firmware (`f5d89888-f8ef-5cb2-a16e-8f79f13f81c8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-27048`	vulnerable	2026-06-08 05:41:54.792185	Details available A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower. Published: 2022-04-15T18:10:41.000Z Updated: 2024-08-03T05:18:39.301Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/mgate-mb3170-mb3270-mb3280-mb3480-protocol-gateways-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-4161`	vulnerable	2026-06-08 05:38:08.587611	ICSA-21-357-01 Moxa MGate Protocol Gateways CRITICAL (9.8) The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server. Published: 2021-12-27T18:48:19.982Z Updated: 2024-09-16T19:24:13.483Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5804`	vulnerable	2026-06-08 05:07:57.835594	Details available Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value. Published: 2016-07-15T16:00:00.000Z Updated: 2024-08-06T01:15:08.955Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-16-196-02 http://www.securityfocus.com/bid/91777	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.