QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-4929

Back to search

CVE-2023-4929

Published: Oct 3, 2023

Modified: Sep 23, 2024

PUBLISHED

CVSS v3.1

6.5

MEDIUM

Description

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

VendorProductVersions

Moxa

NPort 5000AI-M12 Series

affected
1.0 - <= 1.5

Moxa

NPort 5100 Series

affected
1.0 - <= 3.10

Moxa

NPort 5100A Series

affected
1.0 - <= 1.6

Moxa

NPort 5200 Series

affected
1.0 - <= 2.12

Moxa

NPort 5200A Series

affected
1.0 - <= 1.6

Moxa

NPort 5400 Series

affected
1.0 - <= 3.14

Moxa

NPort 5600 Series

affected
1.0 - <= 3.11

Moxa

NPort 5600-DT Series

affected
1.0 - <= 2.9

Moxa

NPort IA5000 Series

affected
1.0 - <= 2.1

Moxa

NPort IA5000A Series

affected
1.0 - <= 2.0

Moxa

NPort IA5000A-I/O Series

affected
1.0 - <= 2.0

Moxa

NPort IAW5000A-I/O Series

affected
1.0 - <= 2.2

Moxa

NPort P5150A Series

affected
1.0 - <= 1.6

Weaknesses (CWE)

CWE-354

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now