VulnerabilityModified
CVE-2023-5627
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable.
HIGH 7.5EPSS 0.31%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.31%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.31% probability · 24th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-257, CWE-303, CWE-327, CWE-287
- Affected
- moxa/nport 6150-t firmware · moxa/nport 6150 firmware · moxa/nport 6250-m-sc-t firmware · moxa/nport 6250-m-sc firmware · moxa/nport 6250-s-sc-t firmware · moxa/nport 6250-s-sc firmware · moxa/nport 6250-t firmware · moxa/nport 6250 firmware · moxa/nport 6450-t firmware · moxa/nport 6450 firmware · moxa/nport 6610-16-48v firmware · moxa/nport 6610-16 firmware · moxa/nport 6610-32-48v firmware · moxa/nport 6610-32 firmware · moxa/nport 6610-8-48v firmware · moxa/nport 6610-8 firmware · moxa/nport 6650-16-48v firmware · moxa/nport 6650-16-hv-t firmware · moxa/nport 6650-16-t firmware · moxa/nport 6650-16 firmware · +7 more
- Source
- psirt@moxa.com
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerabilityVendor Advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerabilityVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.