Authentication Bypass in Moxa MXView Series Web Application
CVE-2021-40390

10CRITICAL

Key Information:

Vendor
Moxa
Status
Mxview Series
Vendor
CVE Published:
14 April 2022

Summary

An authentication bypass vulnerability affects the Web Application functionality of Moxa MXView Series 3.2.4. This issue allows attackers to gain unauthorized access by sending specially crafted HTTP requests. Exploiting this flaw can potentially compromise the integrity and confidentiality of the affected systems, making it crucial for users to address this vulnerability promptly.

Affected Version(s)

MXView Series 3.2.4

References

https://talosintelligence.com/vulnerability_reports/TALOS...
x_refsource_MISC

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.