CVE-2020-8858

HIGH

Moxa MGate 5105-MB-EIP Firmware < 4.1 - Authenticated OS Command Injection via DestIP Parameter

Title source: llm

Description

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4.1. Authentication is required to exploit this vulnerability. The specific flaw exists within the DestIP parameter within MainPing.asp. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9552.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry x_refsource_misc

https://www.zerodayinitiative.com/advisories/ZDI-20-214/

Vendor Advisory x_refsource_misc

https://www.moxa.com/en/support/support/security-advisory/mgate-5105-mb-eip-series-protocol-gateways-vulnerability

Scores

CVSS v3 8.8

EPSS 0.1779

EPSS Percentile 95.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-78

Status published

Products (2)

moxa/mgate_5105-mb-eip-t_firmware < 4.1

moxa/mgate_5105-mb-eip_firmware < 4.1

Published Feb 14, 2020

Tracked Since Feb 18, 2026