CVE-2023-5627
High
Description
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.
SeverityHigh
CVSS7.5
Exploit probability—
ProductMoxa Nport 6150-t Firmware
PublishedNov 1, 2023
First seenNov 1, 2023
Weakness typeCWE-303CWE-303CWE-257CWE-257CWE-327CWE-327
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moxa nport_6150-t_firmware | v ≤ 1.21 | — |
| moxa nport_6150_firmware | v ≤ 1.21 | — |
| moxa nport_6250-m-sc-t_firmware | v ≤ 1.21 | — |
| moxa nport_6250-m-sc_firmware | v ≤ 1.21 | — |
| moxa nport_6250-s-sc-t_firmware | v ≤ 1.21 | — |
| moxa nport_6250-s-sc_firmware | v ≤ 1.21 | — |
| moxa nport_6250-t_firmware | v ≤ 1.21 | — |
| moxa nport_6250_firmware | v ≤ 1.21 | — |
| moxa nport_6450-t_firmware | v ≤ 1.21 | — |
| moxa nport_6450_firmware | v ≤ 1.21 | — |
| moxa nport_6610-16-48v_firmware | v ≤ 1.21 | — |
| moxa nport_6610-16_firmware | v ≤ 1.21 | — |
| moxa nport_6610-32-48v_firmware | v ≤ 1.21 | — |
| moxa nport_6610-32_firmware | v ≤ 1.21 | — |
| moxa nport_6610-8-48v_firmware | v ≤ 1.21 | — |
| moxa nport_6610-8_firmware | v ≤ 1.21 | — |
| moxa nport_6650-16-48v_firmware | v ≤ 1.21 | — |
| moxa nport_6650-16-hv-t_firmware | v ≤ 1.21 | — |
| moxa nport_6650-16-t_firmware | v ≤ 1.21 | — |
| moxa nport_6650-16_firmware | v ≤ 1.21 | — |
| moxa nport_6650-32-48v_firmware | v ≤ 1.21 | — |
| moxa nport_6650-32-hv-t_firmware | v ≤ 1.21 | — |
| moxa nport_6650-32_firmware | v ≤ 1.21 | — |
| moxa nport_6650-8-48v_firmware | v ≤ 1.21 | — |
| moxa nport_6650-8-hv-t_firmware | v ≤ 1.21 | — |
| moxa nport_6650-8-t_firmware | v ≤ 1.21 | — |
| moxa nport_6650-8_firmware | v ≤ 1.21 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.