5.3
CVE-2019-9103
- EPSS 0.39%
- Veröffentlicht 11.03.2020 15:15:17
- Zuletzt bearbeitet 21.11.2024 04:50:59
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker can access sensitive information (e.g., conduct username disclosure attacks) on the built-in WEB-service without authorization.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Moxa ≫ Mb3170 Firmware Version <= 4.0
Moxa ≫ Mb3270 Firmware Version <= 4.0
Moxa ≫ Mb3180 Firmware Version <= 2.0
Moxa ≫ Mb3280 Firmware Version <= 3.0
Moxa ≫ Mb3480 Firmware Version <= 3.0
Moxa ≫ Mb3660 Firmware Version <= 2.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.39% | 0.597 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
| cve@mitre.org | 5.3 | 3.9 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.