VULNERABILITY INTELLIGENCE

CVE-2019-9104

CVSS score7.5 HIGH

EPSS probability1.01%

CISA KEVNot currently listed

Published2020-03-11

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The application's configuration file contains parameters that represent passwords in cleartext.

Weakness classification

CWE-312: Cleartext Storage of Sensitive Information
CWE-522: Insufficiently Protected Credentials

Primary references

cve@mitre.org — Vendor Advisory
cve@mitre.org — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource