Vulnerability · Published May 14, 2021 · Assigned by Kaspersky
CVE-2020-27184
Medium 5.9
In plain English
A medium-severity security flaw in NPort IA5000A Series with Telnet enabled. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS NVD)5.9Medium
Exploit odds (30 days)0.3%top 75.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The NPort IA5000A Series devices use Telnet as one of the network device management services. Telnet does not support the encryption of client-server communications, making it vulnerable to Man-in-the-Middle attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | NPort IA5000A Series with Telnet enabled | All versions |