Vulnerability · Published May 6, 2024 · Assigned by Moxa
CVE-2024-3576NPort 5100A Series Store XSS Vulnerability
High 8.3
In plain English
A high-severity cross-site scripting in NPort 5100A Series from Moxa. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.4%top 67.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The NPort 5100A Series firmware version v1.6 and prior versions are affected by web server XSS vulnerability. The vulnerability is caused by not correctly neutralizing user-controllable input before placing it in output. Malicious users may use the vulnerability to get sensitive information and escalate privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Moxa | NPort 5100A Series | 1.0 – through 1.6 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L