Information Disclosure in Moxa MGate MB3170, MB3270, MB3280, MB3480, MB3660 and MB3180 Devices

CVE-2019-9101

Summary

A security concern has been identified in Moxa MGate MB3170, MB3270, MB3280, MB3480, MB3660, and MB3180 devices where sensitive information, including user credentials, is transmitted to the web server in an unencrypted format. This flaw could potentially allow malicious actors to intercept and exploit this data by monitoring network traffic between the client and server, compromising the security of the devices.

References