What is CVE-2022-27048?

CVE-2022-27048 is a high-severity vulnerability in Moxa Mgate Mb3170. CVSS score: 7.4/10. Published 2022-04-15.

How severe is CVE-2022-27048?

High severity. CVSS v3 base score is 7.4 out of 10.

Vulnerability in Moxa Mgate Mb3170

CVE-2022-27048

A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.

EPSS: 0.008 (51.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Moxa Mgate_mb3170
Moxa Mgate_mb3170_firmware
Moxa Mgate_mb3170i
Moxa Mgate_mb3170i_firmware
Moxa Mgate_mb3170i-m-sc
Moxa Mgate_mb3170i-m-sc_firmware
Moxa Mgate_mb3170i-m-sc-t
Moxa Mgate_mb3170i-m-sc-t_firmware
Moxa Mgate_mb3170i-s-sc
Moxa Mgate_mb3170i-s-sc_firmware

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-27048?: CVE-2022-27048 is a high-severity vulnerability in Moxa Mgate Mb3170. CVSS score: 7.4/10. Published 2022-04-15.
How severe is CVE-2022-27048?: High severity. CVSS v3 base score is 7.4 out of 10.