{"id":"CVE-2021-4161","aliases":["EUVD-2021-34029","GHSA-628p-46mw-v4f9"],"status":"published","title":"ICSA-21-357-01 Moxa MGate Protocol Gateways","description":"The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00704,"percentile":0.53574,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-319"],"published":"2021-12-27T18:48:19Z","modified":"2026-06-17T04:19:08Z","products":[{"vendor":"moxa","product":"mgate mb3180 series"},{"vendor":"moxa","product":"mgate mb3280 series"},{"vendor":"moxa","product":"mgate mb3480 series"},{"vendor":"moxa","product":"mgate_mb3180_firmware"},{"vendor":"moxa","product":"mgate_mb3280_firmware"},{"vendor":"moxa","product":"mgate_mb3480_firmware"}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4161"},{"url":"https://github.com/advisories/GHSA-628p-46mw-v4f9"}],"sources":{"cve":[{"id":"CVE-2021-4161","title":"ICSA-21-357-01 Moxa MGate Protocol Gateways","description":"The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.","status":"published","published":"2021-12-27T18:48:19.982Z","modified":"2024-09-16T19:24:13.483Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:33:07.697752Z"}],"euvd":[{"id":"EUVD-2021-34029","description":"The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.","status":"published","published":"2021-12-27T18:48:19Z","modified":"2024-09-16T19:24:13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:55:23.186812Z"}],"ghsa":[{"id":"GHSA-628p-46mw-v4f9","title":"The affected products contain vulnerable firmware, which could allow an attacker to sniff the...","description":"The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.","status":"published","published":"2021-12-28T00:00:26Z","modified":"2023-02-03T05:03:37Z","cwes":["CWE-319"],"updated_at":"2026-11-02T14:53:23.659712Z"}],"nvd":[{"id":"CVE-2021-4161","description":"The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.","status":"published","published":"2021-12-27T19:15:08.803Z","modified":"2026-06-17T04:19:08.35Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:07:02.977492Z"}]}}