High severity · published Nov 1, 2023
CVE-2023-5627
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N6
Nport 6150 Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6150-t Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6250 Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6250-m-sc Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6250-m-sc-t Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6250-s-sc Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6250-s-sc-t Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6250-t Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6450 Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6450-t Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6610-16 Firmware · Moxa
through 1.21 · source: NVD
N6
Nport 6610-16-48v Firmware · Moxa
through 1.21 · source: NVD