ICSA-17-355-01_Moxa NPort W2150A and W2250A
view advisory published 2017-12-21
Federico Maggi reported the vulnerability to ICS-CERT.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-16727US | critical9.1 | — | ||
A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The default password is empty on the device. An… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationNPort W2150A
Moxa has produced new firmware Version 2.1 for the affected devices that can be downloaded from:
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.moxa.com_support_download.aspx-3Ftype-3Dsupport-26id-3D14781&d=DwMGaQ&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=zE5lG3CZZIbdBvT6slVAzQ&m=fcW86B4AF3htSSHvHJtEOM19GrMfeQ2xeBPTmh_8sj8&s=0U4QozqaqmulZ7MToCRrZVFryx8DHR730WSH8pr8IMc&e= - MitigationNPort W2250A
Moxa has produced new firmware Version 2.1 for the affected devices that can be downloaded from:
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.moxa.com_support_download.aspx-3Ftype-3Dsupport-26id-3D14781&d=DwMGaQ&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=zE5lG3CZZIbdBvT6slVAzQ&m=fcW86B4AF3htSSHvHJtEOM19GrMfeQ2xeBPTmh_8sj8&s=0U4QozqaqmulZ7MToCRrZVFryx8DHR730WSH8pr8IMc&e=
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan