CVE-2019-9099
Severity CVSS v4.0:
Pending analysis
Type:
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Publication date:
11/03/2020
Last modified:
17/03/2020
Description
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A Buffer overflow in the built-in web server allows remote attackers to initiate DoS, and probably to execute arbitrary code (issue 1 of 2).
Impact
Base Score 3.x
9.80
Severity 3.x
CRITICAL
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:moxa:mb3170_firmware:*:*:*:*:*:*:*:* | 4.0 (including) | |
cpe:2.3:h:moxa:mb3170:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:moxa:mb3270_firmware:*:*:*:*:*:*:*:* | 4.0 (including) | |
cpe:2.3:h:moxa:mb3270:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:moxa:mb3180_firmware:*:*:*:*:*:*:*:* | 2.0 (including) | |
cpe:2.3:h:moxa:mb3180:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:moxa:mb3280_firmware:*:*:*:*:*:*:*:* | 3.0 (including) | |
cpe:2.3:h:moxa:mb3280:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:moxa:mb3480_firmware:*:*:*:*:*:*:*:* | 3.0 (including) | |
cpe:2.3:h:moxa:mb3480:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:moxa:mb3660_firmware:*:*:*:*:*:*:*:* | 2.2 (including) | |
cpe:2.3:h:moxa:mb3660:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page