What is CVE-2019-9104?

CVE-2019-9104 is a high-severity vulnerability in Moxa Mb3170, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.5/10. Published 2020-03-11.

How severe is CVE-2019-9104?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Moxa Mb3170

CVE-2019-9104

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The application's configuration file contains parameters that represent passwords in cleartext.

EPSS: 0.011 (62.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Moxa Mb3170
Moxa Mb3170_firmware
Moxa Mb3180
Moxa Mb3180_firmware
Moxa Mb3270
Moxa Mb3270_firmware
Moxa Mb3280
Moxa Mb3280_firmware
Moxa Mb3480
Moxa Mb3480_firmware

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information
CWE-522 — Insufficiently Protected Credentials

References

cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-9104?: CVE-2019-9104 is a high-severity vulnerability in Moxa Mb3170, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.5/10. Published 2020-03-11.
How severe is CVE-2019-9104?: High severity. CVSS v3 base score is 7.5 out of 10.