Critical ICSA-16-336-02A 8 CVEs

Moxa NPort Device Vulnerabilities

Published Sep 4, 2016 · Updated Jun 5, 2025 · Revision 2

Vendor: Moxa Product: NPort 5100A Series Product: NPort 5110 Product: NPort 5130/5150 Series Product: NPort 5150AI-M12 Series Product: NPort 5200 Series Product: NPort 5200A Series Product: NPort 5250AI-M12 Series Product: NPort 5400 Series Product: NPort 5450AI-M12 Series Product: NPort 5600 Series Product: NPort 5600-8-DT Series Product: NPort 5600-8-DTL Series Product: NPort 6000 Series Product: NPort 6110 series Product: NPort IA5450A Product: NPort P5150A

Vulnerabilities 8

Critical 9.8

CVE-2016-9361 Public exploit EPSS 20%

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

Feb 13, 2017
Critical 9.8

CVE-2016-9366

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

Feb 13, 2017
Critical 9.8

CVE-2016-9369

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

Feb 13, 2017
High 8.8

CVE-2016-9365

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

Feb 13, 2017
High 7.5

CVE-2016-9367

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

Feb 13, 2017
High 7.3

CVE-2016-9363

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

Feb 13, 2017
Unscored —

CVE-2016-9348

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

Feb 13, 2017
Unscored —

CVE-2016-9371

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

Feb 13, 2017

Revision history

2025-06-05 #2
Advisory converted into a CSAF
2016-09-04 #1
Initial Publication

References

ICS Advisory ICSA-16-336-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-16-336-02a
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
Recommended Practices
https://www.cisa.gov/uscert/ncas/tips/ST04-014