CVE-2016-5804
CriticalSummary
Moxa MGate MB3180 before 1.8, MB3280 before 2.7, MB3480 before 2.6, MB3170 before 2.5, and MB3270 before 2.7 use weak encryption, allowing remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.
Risk Assessment
Weak encryption poses a risk of unauthorized access to devices, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update the devices to the latest versions that address this vulnerability and to implement stronger authentication mechanisms.
Original NVD description (English source)
Moxa MGate MB3180 before 1.8, MGate MB3280 before 2.7, MGate MB3480 before 2.6, MGate MB3170 before 2.5, and MGate MB3270 before 2.7 use weak encryption, which allows remote attackers to bypass authentication via a brute-force series of guesses for a parameter value.