What’s Vulnerable › Vulnerabilities

CVE-2022-27048

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-15 · updated 2026-06-17

Description

A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.

Affected products

• Moxa Mgate Mb3170-M-Sc-T Firmware: through 4.2
• Moxa Mgate Mb3170-M-Sc Firmware: through 4.2
• Moxa Mgate Mb3170-M-St-T Firmware: through 4.2
• Moxa Mgate Mb3170-M-St Firmware: through 4.2
• Moxa Mgate Mb3170-S-Sc-T Firmware: through 4.2
• Moxa Mgate Mb3170-S-Sc Firmware: through 4.2
• Moxa Mgate Mb3170-T Firmware: through 4.2
• Moxa Mgate Mb3170 Firmware: through 4.2
• Moxa Mgate Mb3170I-M-Sc-T Firmware: through 4.2
• Moxa Mgate Mb3170I-M-Sc Firmware: through 4.2
• Moxa Mgate Mb3170I-S-Sc-T Firmware: through 4.2
• Moxa Mgate Mb3170I-S-Sc Firmware: through 4.2
• Moxa Mgate Mb3170I-T Firmware: through 4.2
• Moxa Mgate Mb3170I Firmware: through 4.2
• Moxa Mgate Mb3270-T Firmware: through 4.2
• Moxa Mgate Mb3270 Firmware: through 4.2
• Moxa Mgate Mb3270I-T Firmware: through 4.2
• Moxa Mgate Mb3270I Firmware: through 4.2
• Moxa Mgate Mb3280 Firmware: through 4.1
• Moxa Mgate Mb3480 Firmware: through 3.2

References

• https://www.moxa.com/en/support/product-support/security-advisory/mgate-mb3170-mb3270-mb3280-mb3480-protocol-gateways-vulnerability
• https://www.moxa.com/en/support/product-support/security-advisory/mgate-mb3170-mb3270-mb3280-mb3480-protocol-gateways-vulnerability

Get alerted when CVE-2022-27048 or the next vulnerability affects your stack