CVE-2021-4161 in MGate MB3180

Summary

by MITRE • 12/27/2021

The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 12/23/2021
• Disclosure: 12/27/2021
• Moderation: accepted
• Entry: VDB-189081
• CPE: ready
• CWE: CWE-319 (confirmed)
• CVSS: 3.7 (VulDB)
• EPSS: 0.00661
• KEV: no
• Activities: very low
• Sector: Transportation, Government, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-4161
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-4161
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-4161/