Vulnerability · Published Nov 1, 2023 · Assigned by Moxa
CVE-2023-5627Incorrect Implementation of Authentication Algorithm Vulnerability
High 7.5
In plain English
A high-severity broken cryptography in NPort 6000 Series from Moxa. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 68.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Moxa | NPort 6000 Series | 1.0 – through 1.21 |
Weakness: CWE-303, CWE-257, CWE-327 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N