High severity · published Feb 13, 2017
CVE-2016-9365
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions…
8.8
CVSS
0.8%
EPSS
No
On KEV
Description
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. Requests are not verified to be intentionally submitted by the proper user (CROSS-SITE REQUEST FORGERY).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N5
Nport 5100 Series Firmware · Moxa
through 2.5; through 3.5 · source: NVD
N5
Nport 5100a Series Firmware · Moxa
through 1.2 · source: NVD
N5
Nport 5200 Series Firmware · Moxa
through 2.7 · source: NVD
N5
Nport 5200a Series Firmware · Moxa
through 1.2 · source: NVD
N5
Nport 5400 Series Firmware · Moxa
through 3.10 · source: NVD
N5
Nport 5600 Series Firmware · Moxa
through 3.6 · source: NVD
N5
Nport 5600-8-dtl Series Firmware · Moxa
through 2.3 · source: NVD
N5
Nport 5x50a1-m12 Series Firmware · Moxa
through 1.1 · source: NVD
N6
Nport 6100 Series Firmware · Moxa
through 1.13 · source: NVD
NP
Nport P5150a Series Firmware · Moxa
through 1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-9365
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-9365
Third Party Advisory
http://www.securityfocus.com/bid/85965
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02
More from Nport 5100 Series Firmware
9.8
CVE-2016-9369
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions…
9.8
CVE-2016-9366
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions…
9.8
CVE-2016-9361
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions…
7.5
CVE-2016-9367
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions…
7.3
CVE-2016-9363
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions…