HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2023-5627

CVSS 7.5v3.1pub. 2023-11-01upd. 2024-11-21

A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Moxa Nport 6150

    HW
    Moxa
    all versions

  • Moxa Nport 6150 Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6150 T

    HW
    Moxa
    all versions

  • Moxa Nport 6150 T Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6250

    HW
    Moxa
    all versions

  • Moxa Nport 6250 Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6250 M Sc

    HW
    Moxa
    all versions

  • Moxa Nport 6250 M Sc Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6250 M Sc T

    HW
    Moxa
    all versions

  • Moxa Nport 6250 M Sc T Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6250 S Sc

    HW
    Moxa
    all versions

  • Moxa Nport 6250 S Sc Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6250 S Sc T

    HW
    Moxa
    all versions

  • Moxa Nport 6250 S Sc T Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6250 T

    HW
    Moxa
    all versions

  • Moxa Nport 6250 T Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6450

    HW
    Moxa
    all versions

  • Moxa Nport 6450 Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6450 T

    HW
    Moxa
    all versions

  • Moxa Nport 6450 T Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6610 16

    HW
    Moxa
    all versions

  • Moxa Nport 6610 16 48v

    HW
    Moxa
    all versions

  • Moxa Nport 6610 16 48v Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6610 16 Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6610 32

    HW
    Moxa
    all versions

  • Moxa Nport 6610 32 48v

    HW
    Moxa
    all versions

  • Moxa Nport 6610 32 48v Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6610 32 Firmware

    OS
    Moxa
    ≤ 1.21

  • Moxa Nport 6610 8

    HW
    Moxa
    all versions

  • Moxa Nport 6610 8 48v

    HW
    Moxa
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2016-9369CRITICAL9.8PL ✓same product

Moxa NPort – aktualizacja firmware bez uwierzytelnienia umożliwia RCE

CVE-2016-9361CRITICAL9.8PL ✓same product

Moxa NPort — obejście uwierzytelnienia przy zmianie hasła administratora

CVE-2016-9366CRITICAL9.8PL ✓same product

Moxa NPort — podatność brute force umożliwiająca ominięcie uwierzytelnienia

CVE-2016-9363HIGH7.3same product

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6...

CVE-2016-9365HIGH8.8same product

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6...