CVE-2019-9099

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices…

High · published March 11, 2020

CVSS v3.0
7.5
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow in Moxa MGate devices could be your gateway to a devastating DoS! 💥 Think of it like a restaurant with a single kitchen that gets overwhelmed when too many orders hit the system at once, causing all service to grind to a halt. A remote attacker can exploit this buffer overflow to either crash the system or potentially cook up something malicious! If exploited, this vulnerability could lead to a complete denial of service, rendering your devices unresponsive. Even scarier, it could allow attackers to execute arbitrary code, putting your network at risk of unauthorized access and control. That's a nightmare scenario for anyone who relies on these devices!

Put simply

Think of it like a restaurant with a single kitchen that gets overwhelmed when too many orders hit the system at once, causing all service to grind to a halt. A remote attacker can exploit this buffer overflow to either crash the system or potentially cook up something malicious! The buffer overflow in the web server of Moxa MGate MB3170, MB3270, MB3280, MB3480, and MB3660 devices allows remote attackers to send overly large requests. This can lead to system crashes or arbitrary code execution, opening the door to more serious attacks.

What to do

If exploited, this vulnerability could lead to a complete denial of service, rendering your devices unresponsive. Even scarier, it could allow attackers to execute arbitrary code, putting your network at risk of unauthorized access and control. That's a nightmare scenario for anyone who relies on these devices! Update your Moxa MGate devices to versions 4.1 or later for the MB3170 and MB3270, version 3.1 for the MB3280 and MB3480, and version 2.3 for the MB3660. Ensure that proper network segmentation and firewall rules are in place to limit exposure. Regularly monitor your devices for any unusual activity! You’ve got this! Take action now to secure your network and keep those devices safe! 🛡️

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.04047 · 90.6th percentile
Published
2020-03-11T14:27Z
EPSS history
Timeline
  • 11 MAR 14:27Z
    An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices…
    cvelistv5