High severity · published Oct 3, 2023
CVE-2023-4929
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability
8.8
CVSS
0.3%
EPSS
No
On KEV
Description
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N5
Nport 5110 Firmware · Moxa
through 2.10 · source: NVD
N5
Nport 5110-t Firmware · Moxa
through 2.10 · source: NVD
N5
Nport 5110a Firmware · Moxa
through 1.6 · source: NVD
N5
Nport 5110a-t Firmware · Moxa
through 1.6 · source: NVD
N5
Nport 5130 Firmware · Moxa
through 3.10 · source: NVD
N5
Nport 5130a Firmware · Moxa
through 1.6 · source: NVD
N5
Nport 5130a-t Firmware · Moxa
through 1.6 · source: NVD
N5
Nport 5150 Firmware · Moxa
through 3.10 · source: NVD
N5
Nport 5150a Firmware · Moxa
through 1.6 · source: NVD
N5
Nport 5150a-t Firmware · Moxa
through 1.6 · source: NVD
N5
Nport 5150ai-m12 Firmware · Moxa
through 1.5 · source: NVD
N5
Nport 5150ai-m12-ct Firmware · Moxa
through 1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-4929
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-4929
Vendor Advisory
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability
More from Nport 5110 Firmware
8.6
CVE-2017-16715
An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and…
8.2
CVE-2022-2044
MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, causing a denial-of-service condition or…
7.5
CVE-2022-2043
MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive
7.5
CVE-2017-16719
An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and…
7.5
CVE-2017-14028
A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and…