CVE-2022-27048 - CVE House

Status published High CVE-2022-27048

A vulnerability has been discovered in Moxa MGate which allows...

7.4 CVSS

Vulnerability Description

A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-27048

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.moxa.com/en/support/product-support/security-advisory/mgate-mb3170-mb3270-mb3280-mb3480-protocol-gateways-vulnerability

More from moxa

View All →

CVE-2021-46560

The firmware on Moxa TN-5900 devices through 3.1 allows command...

Critical 9.8

CVE-2021-46559

The firmware on Moxa TN-5900 devices through 3.1 has a...

High 7.5

CVE-2021-46082

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol...

High 7.5

CVE-2021-39279

Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This...

High 8.8

CVE-2021-39278

Certain MOXA devices allow reflected XSS via the Config Import...

Medium 6.1

Affected Vendor

moxa

View all reports →

Affected Software

mgate mb3170i firmware, mgate mb3170i-t firmware, mgate mb3170-m-st firmware, mgate mb3170-m-sc-t firmware, mgate mb3170 firmware, mgate mb3170-t firmware, mgate mb3170-m-sc firmware, mgate mb3170i-s-sc firmware, mgate mb3270i firmware, mgate mb3270i-t firmware, mgate mb3170i-m-sc firmware, mgate mb3170-s-sc-t firmware, mgate mb3170i-m-sc-t firmware, mgate mb3270 firmware, mgate mb3270-t firmware, mgate mb3170-s-sc firmware, mgate mb3170-m-st-t firmware, mgate mb3170i-s-sc-t firmware, mgate mb3280 firmware, mgate mb3480 firmware

Vulnerable Versions:

Timeline

Official Publish: April 15th, 2022

Last Modified: August 3rd, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.