MOXA NPort IAW5000A-I/O Series
Successful exploitation of these vulnerabilities could allow an attacker to gain access to and hijack a session; allow an attacker with user privileges to perform requests with administrative privileges; allow the use of weak passwords; allow credentials of third-party services to be transmitted in cleartext; allow the use of brute force to bypass authentication on an SSH/Telnet session; or allow access to sensitive information without proper authorization.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-25198US | high8.8 | — | ||
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain… | ||||
| CVE-2020-25196US | critical9.8 | — | ||
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authenticatio… | ||||
| CVE-2020-25194US | high8.8 | — | ||
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform req… | ||||
| CVE-2020-25192US | medium5.3 | — | ||
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization. | ||||
| CVE-2020-25190US | critical9.8OT erhöht | — | ||
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext. | ||||
| CVE-2020-25153US | high7.5 | — | ||
The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- BehobenNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535 - BehobenNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535 - BehobenNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535 - BehobenNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535 - BehobenNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535 - BehobenNPort
Moxa has released an updated firmware version for the NPort IAW5000A-I/O Series and recommends users install this update on all affected systems.
https://www.moxa.com/en/support/product-support/software-and-documentation/search?psid=50535
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan