Description
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Moxa | NPort 5000AI-M12 Series | 1.0 – ≤ 1.5 | — |
| Moxa | NPort 5100 Series | 1.0 – ≤ 3.10 | — |
| Moxa | NPort 5100A Series | 1.0 – ≤ 1.6 | — |
| Moxa | NPort 5200 Series | 1.0 – ≤ 2.12 | — |
| Moxa | NPort 5200A Series | 1.0 – ≤ 1.6 | — |
| Moxa | NPort 5400 Series | 1.0 – ≤ 3.14 | — |
| Moxa | NPort 5600 Series | 1.0 – ≤ 3.11 | — |
| Moxa | NPort 5600-DT Series | 1.0 – ≤ 2.9 | — |
| Moxa | NPort IA5000 Series | 1.0 – ≤ 2.1 | — |
| Moxa | NPort IA5000A Series | 1.0 – ≤ 2.0 | — |
| Moxa | NPort IA5000A-I/O Series | 1.0 – ≤ 2.0 | — |
| Moxa | NPort IAW5000A-I/O Series | 1.0 – ≤ 2.2 | — |
| Moxa | NPort P5150A Series | 1.0 – ≤ 1.6 | — |
Advisories 1
- WID-SEC-2023-2537 Moxa NPort: Schwachstelle ermöglicht Erlangen von Administratorrechten BSI CERT-Bund (WID) · Oct 3, 2023