Vulnerability Spotlight: Vulnerabilities in Moxa MXView could allow attacker to view sensitive information, bypass login
Summary: Cisco Talos discovered two vulnerabilities in Moxa's MXview network management software, used to configure, monitor and diagnose devices in industrial control system environments. TALOS-2021-1403 (CVE-2021-40392) lets an attacker sniff traffic to view unencrypted network communication, while TALOS-2021-1401 (CVE-2021-40390) lets an attacker reach the device without prior authentication by sending a specially crafted HTTP request; Moxa MXView Series version 3.2.4 was tested and confirmed exploitable, and an update is available.
What you should know: MXview sits in industrial control system networks, and one of these flaws needs no credentials at all - a crafted HTTP request is enough to get in, while the other exposes unencrypted traffic to anyone who can sniff it. Snort rules 58459 and 58460 exist to catch exploitation attempts, but detection is not the same as patching a confirmed-vulnerable 3.2.4 install.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-40390CVE-2021-40392
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026