CVE-2021-33824

7.5HIGH

Key Information

Vendor
Moxa
Status
Mgate Mb3180 Firmware
Vendor
CVE Published:
18 June 2021

Summary

An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service.

Refferences

https://github.com/shekyan/slowhttptest
x_refsource_MISC
https://www.moxa.com/en/products/industrial-edge-connecti...
x_refsource_MISC
https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.