Cyber Resilience

CVE-2021-46082

High

Published: 18 February 2022

Published
18 February 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0029 53.2th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-46082 is a high-severity Missing Release of Memory after Effective Lifetime (CWE-401) vulnerability in Moxa Tn-5916-Wv-T Firmware. Its CVSS base score is 7.5 (High).

Operationally, ranked in the top 46.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to contain a memory leak which allows attackers to cause a Denial of Service (DoS) via crafted packets.

CWE(s)
CWE-401

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

moxa
tn-5916-wv-t firmware
≤ 3.1
moxa
tn-5916-wv-ct-t firmware
≤ 3.1
moxa
mgate 5109 firmware
≤ 2.2
moxa
mgate 5109-t firmware
≤ 2.2
moxa
mgate 5101-pbm-mn firmware
≤ 2.1
moxa
mgate 5101-pbm-mn-t firmware
≤ 2.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References