High severity · published Nov 16, 2017
CVE-2017-14028
A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and…
7.5
CVSS
2.1%
EPSS
No
On KEV
Description
A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exhaust memory resources by sending a large amount of TCP SYN packets.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N5
Nport 5110 Firmware · Moxa
2.2; 2.4; 2.6; 2.7 · source: NVD
N5
Nport 5130 Firmware · Moxa
through 3.7 · source: NVD
N5
Nport 5150 Firmware · Moxa
through 3.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-14028
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-14028
Third Party Advisory
http://www.securityfocus.com/bid/101885
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01
More from Nport 5110 Firmware
8.8
CVE-2023-4929
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability
8.6
CVE-2017-16715
An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and…
8.2
CVE-2022-2044
MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, causing a denial-of-service condition or…
7.5
CVE-2022-2043
MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive
7.5
CVE-2017-16719
An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and…