MOXA NPort IAW5000A-I/O Series
Successful exploitation of these vulnerabilities could allow an attacker to gain access to and hijack a session; allow an attacker with user privileges to perform requests with administrative privileges; allow the use of weak passwords; allow credentials of third-party services to be transmitted in cleartext; allow the use of brute force to bypass authentication on an SSH/Telnet session; or allow access to sensitive information without proper authorization.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25198US | high8.8 | — | ||
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain… | ||||
| CVE-2020-25196US | critical9.8 | — | ||
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authenticatio… | ||||
| CVE-2020-25194US | high8.8 | — | ||
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform req… | ||||
| CVE-2020-25192US | medium5.3 | — | ||
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization. | ||||
| CVE-2020-25190US | critical9.8OT elevated | — | ||
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext. | ||||
| CVE-2020-25153US | high7.5 | — | ||
The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords. | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- FixedNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535 - FixedNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535 - FixedNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535 - FixedNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535 - FixedNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535 - FixedNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan