CVE-2016-5804: Moxa Mgate MB3170 Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.

Affected products

• Moxa Mgate MB3170 Firmware: before 2.5 (fixed in 2.5)
• Moxa Mgate MB3180 Firmware: before 1.8 (fixed in 1.8)
• Moxa Mgate MB3270 Firmware: before 2.7 (fixed in 2.7)
• Moxa Mgate MB3280 Firmware: before 2.7 (fixed in 2.7)
• Moxa Mgate MB3480 Firmware: before 2.6 (fixed in 2.6)

Published 2016-07-15. Last modified 2026-06-17.