CVE-2021-38454

critical · 10

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS

15.8%

EPSS (exploit prob.)

97th

EPSS percentile

2021-10-12

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-284CWE-22

Affected products

Vendor	Product	Affected versions
moxa	mxview	>= 3.0, <= 3.2.2

Check a specific version with /api/v1/cve/match.

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-278-03
https://us-cert.cisa.gov/ics/advisories/icsa-21-278-03

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-38454