← Back to home
ICSA-21-278-03  ·  Published 2021-10-05  ·  View on CISA ICS-CERT ↗

Moxa MXview Network Management Software

CVSS 10.0 CRITICAL

Risk Summary

Successful exploitation of these vulnerabilities may allow an attacker to create or overwrite critical files to execute code, gain access to the program, obtain credentials, disable the software, read and modify otherwise inaccessible data, allow remote connections to internal communication channels, or interact and use MQTT remotely.

Remediations

  • Upgrade to software package v3.2.4 or higher.
  • Users should change their Windows password regularly and use a firewall.
  • If users need to use a multiple-site function, Moxa recommends a firewall to block Port 8883. If users do not have this requirement, Moxa suggests using the firewall to assign the Accessible IP of MXview at the client site.

Affected Vendors

Moxa

Affected Products (1)

Moxa · MXview Network Management Software >= 3.x | <= 3.2.2

Affected Sectors

Critical Manufacturing, Energy, Transportation Systems

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more