NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability (Moxa NPort 5000AI-M12 Series)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.31 % · percentile 24 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Moxa
- NVD status
- Modified
Description
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.
Weaknesses (CWE)
- CWE-354 — Improper Validation of Integrity Check Value
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H | Moxa |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H | NVD · psirt@moxa.com (Secondary) |
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2023-54765
- GCVE · GCVE-0-2023-4929
CERT-FR advisories
- CERTFR-2023-AVI-0802 — Vulnérabilité dans les produits Moxa · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:moxa:nport_5150ai-m12-ct-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5250ai-m12-ct-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5150ai-m12-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5250ai-m12-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5450ai-m12-ct-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5150ai-m12_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5250ai-m12_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5150ai-m12-ct_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5250ai-m12-ct_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5450ai-m12-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5450ai-m12_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5450ai-m12-ct_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5130_firmware:*:*:*:*:*:*:*:*≤ 3.10cpe:2.3:o:moxa:nport_5150_firmware:*:*:*:*:*:*:*:*≤ 3.10cpe:2.3:o:moxa:nport_5110_firmware:*:*:*:*:*:*:*:*≤ 2.10cpe:2.3:o:moxa:nport_5110-t_firmware:*:*:*:*:*:*:*:*≤ 2.10cpe:2.3:o:moxa:nport_5110a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5110a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5130a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5130a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5150a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5150a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5210a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5210a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5230a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5230a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5250a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5250a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5210_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5232_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5210-t_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5232-t_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5230-t_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5232i-t_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5230_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5232i_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5410_firmware:*:*:*:*:*:*:*:*≥ 2.0 ≤ 2.9cpe:2.3:o:moxa:nport_5410_firmware:*:*:*:*:*:*:*:*≥ 3.2 ≤ 3.14cpe:2.3:o:moxa:nport_5430_firmware:*:*:*:*:*:*:*:*≥ 2.0 ≤ 2.9cpe:2.3:o:moxa:nport_5430_firmware:*:*:*:*:*:*:*:*≥ 3.2 ≤ 3.14- +88 more
Affected products
| Product | Versions |
|---|---|
| Moxa · NPort 5000AI-M12 Series | affected 1.0 ≤ 1.5 |
| Moxa · NPort 5100 Series | affected 1.0 ≤ 3.10 |
| Moxa · NPort 5100A Series | affected 1.0 ≤ 1.6 |
| Moxa · NPort 5200 Series | affected 1.0 ≤ 2.12 |
| Moxa · NPort 5200A Series | affected 1.0 ≤ 1.6 |
| Moxa · NPort 5400 Series | affected 1.0 ≤ 3.14 |
| Moxa · NPort 5600 Series | affected 1.0 ≤ 3.11 |
| Moxa · NPort 5600-DT Series | affected 1.0 ≤ 2.9 |
| Moxa · NPort IA5000 Series | affected 1.0 ≤ 2.1 |
| Moxa · NPort IA5000A Series | affected 1.0 ≤ 2.0 |
| Moxa · NPort IA5000A-I/O Series | affected 1.0 ≤ 2.0 |
| Moxa · NPort IAW5000A-I/O Series | affected 1.0 ≤ 2.2 |
| Moxa · NPort P5150A Series | affected 1.0 ≤ 1.6 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |