CVE-2022-27048: Moxa Mgate MB3170-M-Sc-T Firmware

High severity, CVSS 7.4. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB3170 Series Firmware Version 4.2 or lower. and MGate MB3270 Series Firmware Version 4.2 or lower. and MGate MB3280 Series Firmware Version 4.1 or lower. and MGate MB3480 Series Firmware Version 3.2 or lower.

Affected products

• Moxa Mgate MB3170-M-Sc-T Firmware: up to and including 4.2
• Moxa Mgate MB3170-M-Sc Firmware: up to and including 4.2
• Moxa Mgate MB3170-M-St-T Firmware: up to and including 4.2
• Moxa Mgate MB3170-M-St Firmware: up to and including 4.2
• Moxa Mgate MB3170-S-Sc-T Firmware: up to and including 4.2
• Moxa Mgate MB3170-S-Sc Firmware: up to and including 4.2
• Moxa Mgate MB3170-T Firmware: up to and including 4.2
• Moxa Mgate MB3170 Firmware: up to and including 4.2
• Moxa Mgate MB3170I-M-Sc-T Firmware: up to and including 4.2
• Moxa Mgate MB3170I-M-Sc Firmware: up to and including 4.2
• Moxa Mgate MB3170I-S-Sc-T Firmware: up to and including 4.2
• Moxa Mgate MB3170I-S-Sc Firmware: up to and including 4.2
• Moxa Mgate MB3170I-T Firmware: up to and including 4.2
• Moxa Mgate MB3170I Firmware: up to and including 4.2
• Moxa Mgate MB3270-T Firmware: up to and including 4.2
• Moxa Mgate MB3270 Firmware: up to and including 4.2
• Moxa Mgate MB3270I-T Firmware: up to and including 4.2
• Moxa Mgate MB3270I Firmware: up to and including 4.2
• Moxa Mgate MB3280 Firmware: up to and including 4.1
• Moxa Mgate MB3480 Firmware: up to and including 3.2

Published 2022-04-15. Last modified 2026-06-17.