high7.5
CVE-2023-5627
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable.
Impact
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moxa | Nport 6150-T Firmware | through 1.21 |
| Moxa | Nport 6150 Firmware | through 1.21 |
| Moxa | Nport 6250-M-Sc-T Firmware | through 1.21 |
| Moxa | Nport 6250-M-Sc Firmware | through 1.21 |
| Moxa | Nport 6250-S-Sc-T Firmware | through 1.21 |
| Moxa | Nport 6250-S-Sc Firmware | through 1.21 |
| Moxa | Nport 6250-T Firmware | through 1.21 |
| Moxa | Nport 6250 Firmware | through 1.21 |
| Moxa | Nport 6450-T Firmware | through 1.21 |
| Moxa | Nport 6450 Firmware | through 1.21 |
| Moxa | Nport 6610-16-48v Firmware | through 1.21 |
| Moxa | Nport 6610-16 Firmware | through 1.21 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerability
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerability