Incorrect Implementation of Authentication Algorithm Vulnerability (Moxa NPort 6000 Series)
En bref
- Source
- NVD
- EPSS
- EPSS 0.31 % · centile 24 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Moxa
- Statut NVD
- Modified
Rechercher sur…
Description
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.
Faiblesses (CWE)
- CWE-303 — Implémentation incorrecte de l'algorithme d'authentification
- CWE-257 — Stockage de mots de passe dans un format réversible
- CWE-327 — Utilisation d'un algorithme cryptographique cassé ou risqué
- CWE-287 — Authentification incorrecte
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | Moxa |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | NVD · psirt@moxa.com (Secondary) |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2023-57920
- GCVE · GCVE-0-2023-5627
Avis du CERT-FR
- CERTFR-2023-AVI-0901 — Multiples vulnérabilités dans les produits Moxa · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:moxa:nport_6150-t_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6150_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6250-m-sc-t_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6250-m-sc_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6250-s-sc-t_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6250-s-sc_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6250-t_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6250_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6450-t_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6450_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6610-16-48v_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6610-16_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6610-32-48v_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6610-32_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6610-8-48v_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6610-8_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-16-48v_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-16-hv-t_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-16-t_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-16_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-32-48v_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-32-hv-t_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-32_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-8-48v_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-8-hv-t_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-8-t_firmware:*:*:*:*:*:*:*:*≤ 1.21cpe:2.3:o:moxa:nport_6650-8_firmware:*:*:*:*:*:*:*:*≤ 1.21
Produits affectés
| Produit | Versions |
|---|---|
| Moxa · NPort 6000 Series | affected 1.0 ≤ 1.21 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |