Vulnerability · Published Oct 3, 2023 · Assigned by Moxa
CVE-2023-4929NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability
Medium 6.5
In plain English
A medium-severity security flaw in NPort 5000AI-M12 Series from Moxa. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 75.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Moxa | NPort 5000AI-M12 Series | 1.0 – through 1.5 |
| Moxa | NPort 5100 Series | 1.0 – through 3.10 |
| Moxa | NPort 5100A Series | 1.0 – through 1.6 |
| Moxa | NPort 5200 Series | 1.0 – through 2.12 |
| Moxa | NPort 5200A Series | 1.0 – through 1.6 |
| Moxa | NPort 5400 Series | 1.0 – through 3.14 |
| Moxa | NPort 5600 Series | 1.0 – through 3.11 |
| Moxa | NPort 5600-DT Series | 1.0 – through 2.9 |
| Moxa | NPort IA5000 Series | 1.0 – through 2.1 |
| Moxa | NPort IA5000A Series | 1.0 – through 2.0 |
| Moxa | NPort IA5000A-I/O Series | 1.0 – through 2.0 |
| Moxa | NPort IAW5000A-I/O Series | 1.0 – through 2.2 |
| Moxa | NPort P5150A Series | 1.0 – through 1.6 |
Weakness: CWE-354 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H