Skip to content
OpenAdvisories
Unscored CVE-2020-27149 EUVD-2020-19673GHSA-6q59-xh2r-73jw

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests…

Published May 14, 2021 · Updated Aug 4, 2024 · Assigned by Kaspersky

Description

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed.

Affected products

VendorProductAffectedFixed
— NPort IA5000A Series with web console enabled All versions before 1.5 for NPort IA5150A/IA5250A Series. All version before 2.0 for NPort 5450 Series —

References