CVE-2021-40390 CRITICAL

CVE-2021-40390

Vendor Moxa
Product MXView Series
Weakness CWE-798 · Hardcoded credentials
Published April 14, 2022
Last update April 15, 2025
View on NVD All CVEs

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can lead to unauthorized access. An attacker can send an HTTP request to trigger this vulnerability.

Key dates

02Disclosure timeline

April 14, 2022 CVE published
April 15, 2025 Record updated