medium5.9
CVE-2020-27184
The NPort IA5000A Series devices use Telnet as one of the network device management services.
Impact
The NPort IA5000A Series devices use Telnet as one of the network device management services. Telnet does not support the encryption of client-server communications, making it vulnerable to Man-in-the-Middle attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moxa | Nport Ia5150a Firmware | through 1.4 |
| Moxa | Nport Ia5250a Firmware | through 1.4 |
| Moxa | Nport Ia5450a Firmware | through 1.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-020%2C
- https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-020%2C
- https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities