7.8

CVE-2021-46082

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to contain a memory leak which allows attackers to cause a Denial of Service (DoS) via crafted packets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Moxa ≫ Tn-5916-wv-t Firmware Version <= 3.1
   Moxa ≫ Tn-5916-wv-t Version-
Moxa ≫ Tn-5916-wv-ct-t Firmware Version <= 3.1
   Moxa ≫ Tn-5916-wv-ct-t Version-
Moxa ≫ Mgate 5109 Firmware Version <= 2.2
   Moxa ≫ Mgate 5109 Version-
Moxa ≫ Mgate 5109-t Firmware Version <= 2.2
   Moxa ≫ Mgate 5109-t Version-
Moxa ≫ Mgate 5101-pbm-mn Firmware Version <= 2.1
   Moxa ≫ Mgate 5101-pbm-mn Version-
Moxa ≫ Mgate 5101-pbm-mn-t Firmware Version <= 2.1
   Moxa ≫ Mgate 5101-pbm-mn-t Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.524
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.