NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability (Moxa NPort 5000AI-M12 Series)
En bref
- Source
- NVD
- EPSS
- EPSS 0.31 % · centile 24 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Moxa
- Statut NVD
- Modified
Description
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.
Faiblesses (CWE)
- CWE-354 — Validation incorrecte d'une valeur de contrôle d'intégrité
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H | Moxa |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H | NVD · psirt@moxa.com (Secondary) |
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2023-54765
- GCVE · GCVE-0-2023-4929
Avis du CERT-FR
- CERTFR-2023-AVI-0802 — Vulnérabilité dans les produits Moxa · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:moxa:nport_5150ai-m12-ct-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5250ai-m12-ct-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5150ai-m12-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5250ai-m12-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5450ai-m12-ct-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5150ai-m12_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5250ai-m12_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5150ai-m12-ct_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5250ai-m12-ct_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5450ai-m12-t_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5450ai-m12_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5450ai-m12-ct_firmware:*:*:*:*:*:*:*:*≤ 1.5cpe:2.3:o:moxa:nport_5130_firmware:*:*:*:*:*:*:*:*≤ 3.10cpe:2.3:o:moxa:nport_5150_firmware:*:*:*:*:*:*:*:*≤ 3.10cpe:2.3:o:moxa:nport_5110_firmware:*:*:*:*:*:*:*:*≤ 2.10cpe:2.3:o:moxa:nport_5110-t_firmware:*:*:*:*:*:*:*:*≤ 2.10cpe:2.3:o:moxa:nport_5110a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5110a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5130a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5130a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5150a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5150a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5210a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5210a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5230a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5230a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5250a_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5250a-t_firmware:*:*:*:*:*:*:*:*≤ 1.6cpe:2.3:o:moxa:nport_5210_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5232_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5210-t_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5232-t_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5230-t_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5232i-t_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5230_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5232i_firmware:*:*:*:*:*:*:*:*≤ 2.12cpe:2.3:o:moxa:nport_5410_firmware:*:*:*:*:*:*:*:*≥ 2.0 ≤ 2.9cpe:2.3:o:moxa:nport_5410_firmware:*:*:*:*:*:*:*:*≥ 3.2 ≤ 3.14cpe:2.3:o:moxa:nport_5430_firmware:*:*:*:*:*:*:*:*≥ 2.0 ≤ 2.9cpe:2.3:o:moxa:nport_5430_firmware:*:*:*:*:*:*:*:*≥ 3.2 ≤ 3.14- +88 autres
Produits affectés
| Produit | Versions |
|---|---|
| Moxa · NPort 5000AI-M12 Series | affected 1.0 ≤ 1.5 |
| Moxa · NPort 5100 Series | affected 1.0 ≤ 3.10 |
| Moxa · NPort 5100A Series | affected 1.0 ≤ 1.6 |
| Moxa · NPort 5200 Series | affected 1.0 ≤ 2.12 |
| Moxa · NPort 5200A Series | affected 1.0 ≤ 1.6 |
| Moxa · NPort 5400 Series | affected 1.0 ≤ 3.14 |
| Moxa · NPort 5600 Series | affected 1.0 ≤ 3.11 |
| Moxa · NPort 5600-DT Series | affected 1.0 ≤ 2.9 |
| Moxa · NPort IA5000 Series | affected 1.0 ≤ 2.1 |
| Moxa · NPort IA5000A Series | affected 1.0 ≤ 2.0 |
| Moxa · NPort IA5000A-I/O Series | affected 1.0 ≤ 2.0 |
| Moxa · NPort IAW5000A-I/O Series | affected 1.0 ≤ 2.2 |
| Moxa · NPort P5150A Series | affected 1.0 ≤ 1.6 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |