Vulnerability-Lookup

VAR-202310-2248

Vulnerability from variot - Updated: 2024-08-14 15:00

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices. nport 5150ai-m12-ct-t firmware, nport 5250ai-m12-ct-t firmware, nport 5150ai-m12-t firmware etc. Moxa Inc. The product contains a vulnerability related to insufficient data integrity verification.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202310-2248",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "nport 5250ai-m12",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia-5150i-s-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport ia-5150i-m-sc-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport ia5250ai-t-iex",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5232-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.12"
      },
      {
        "model": "nport ia5450ai",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.0"
      },
      {
        "model": "nport 5410",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.2"
      },
      {
        "model": "nport ia-5150i-s-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport ia-5150i-m-sc-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport ia-5150i-s-sc-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5430",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.2"
      },
      {
        "model": "nport 5610-16-48v",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport 5650-16-s-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport 5150ai-m12-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5230",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.12"
      },
      {
        "model": "nport ia-5150i-s-sc-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport 5150ai-m12",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia-5250i",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport ia-5150-s-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5230a-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport 5650-16-m-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport ia-5150-m-st",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport 5250ai-m12-ct",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5650-16-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport ia-5150-s-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport 5150ai-m12-ct-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5130a-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport ia-5150i",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport ia5150a-t-iex",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia-5250",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5110-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.10"
      },
      {
        "model": "nport ia5150ai-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia-5150i",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport 5210",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.12"
      },
      {
        "model": "nport 5650-8-dt",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.9"
      },
      {
        "model": "nport ia-5250",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport ia5450a-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.0"
      },
      {
        "model": "nport ia5250a",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5450i-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.14"
      },
      {
        "model": "nport 5150a-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport 5610-16",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport ia5450ai-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.0"
      },
      {
        "model": "nport 5110a",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport ia5150ai",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia5250a-iex",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia5000a-i\\/o",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.0"
      },
      {
        "model": "nport ia-5150",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport ia5250ai",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia5150a",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia5150ai-t-iex",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia5150a-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia-5150i-m-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport 5610-8-dt-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.9"
      },
      {
        "model": "nport 5650i-8-dt-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.9"
      },
      {
        "model": "nport ia5250ai-iex",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5630-16",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport 5410",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.14"
      },
      {
        "model": "nport ia-5150-m-st-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport ia-5150-m-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5150",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.10"
      },
      {
        "model": "nport 5450ai-m12",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia5250ai-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5430",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.14"
      },
      {
        "model": "nport iaw5000a-i\\/o",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.2"
      },
      {
        "model": "nport p5150a",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport 5130a",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport ia-5150-m-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport 5650-8-s-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport 5450ai-m12-ct-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5210a",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport 5610-8-dt",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.9"
      },
      {
        "model": "nport 5232i-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.12"
      },
      {
        "model": "nport 5650-8",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport ia5150ai-iex",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5450-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.14"
      },
      {
        "model": "nport 5410",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.0"
      },
      {
        "model": "nport 5650-8-dt-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.9"
      },
      {
        "model": "nport ia-5250i",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5210a-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport 5610-8-dt-j",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.9"
      },
      {
        "model": "nport 5430",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.0"
      },
      {
        "model": "nport ia-5150-m-st",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5232",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.12"
      },
      {
        "model": "nport 5232i",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.12"
      },
      {
        "model": "nport 5650-8-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport 5410",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.9"
      },
      {
        "model": "nport ia5250a-t-iex",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5650-16",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport 5650-8-m-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport 5250ai-m12-ct-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5610-8",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport 5430",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.9"
      },
      {
        "model": "nport ia5150a-iex",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5650-16-hv-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport ia-5150i-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport ia5450a",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.0"
      },
      {
        "model": "nport 5210-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.12"
      },
      {
        "model": "nport 5610-8-48v",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport ia-5250i-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5150a",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport ia-5150-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport ia-5150i-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport 5130",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.10"
      },
      {
        "model": "nport 5650i-8-dt",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.9"
      },
      {
        "model": "nport 5110a-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport ia-5250i-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport ia-5150-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport ia-5150",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5650-8-hv-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport 5450ai-m12-ct",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia-5150i-m-sc",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5230-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.12"
      },
      {
        "model": "nport 5450i",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.14"
      },
      {
        "model": "nport 5630-8",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.11"
      },
      {
        "model": "nport ia-5150-s-sc-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5150ai-m12-ct",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia-5250-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport 5650-8-dt-j",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.9"
      },
      {
        "model": "nport 5450ai-m12-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia-5150-s-sc-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport ia-5150-m-st-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport ia-5150-m-sc-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.1"
      },
      {
        "model": "nport ia-5250-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport 5250a",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport p5150a-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport 5250ai-m12-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport ia-5150-m-sc-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.7"
      },
      {
        "model": "nport ia5250a-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.5"
      },
      {
        "model": "nport 5450",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "3.14"
      },
      {
        "model": "nport 5250a-t",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport 5230a",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "1.6"
      },
      {
        "model": "nport 5110",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "moxa",
        "version": "2.10"
      },
      {
        "model": "nport 5150ai-m12-ct-t",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5250ai-m12-ct",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5450ai-m12-ct-t",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5110-t",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5250ai-m12-ct-t",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5450ai-m12-ct",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5130a",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5110a-t",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5110a",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5110",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5150ai-m12-ct",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5130a-t",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5450ai-m12",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5130",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5150",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5250ai-m12",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5150ai-m12-t",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5250ai-m12-t",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5450ai-m12-t",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      },
      {
        "model": "nport 5150ai-m12",
        "scope": null,
        "trust": 0.8,
        "vendor": "moxa",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-013859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4929"
      }
    ]
  },
  "cve": "CVE-2023-4929",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.8,
            "id": "CVE-2023-4929",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "psirt@moxa.com",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 1.2,
            "id": "CVE-2023-4929",
            "impactScore": 5.2,
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 8.8,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2023-4929",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2023-4929",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "psirt@moxa.com",
            "id": "CVE-2023-4929",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2023-4929",
            "trust": 0.8,
            "value": "High"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-013859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4929"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4929"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices. nport 5150ai-m12-ct-t firmware, nport 5250ai-m12-ct-t firmware, nport 5150ai-m12-t firmware etc. Moxa Inc. The product contains a vulnerability related to insufficient data integrity verification.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2023-4929"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-013859"
      }
    ],
    "trust": 1.62
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2023-4929",
        "trust": 2.6
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-013859",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-013859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4929"
      }
    ]
  },
  "id": "VAR-202310-2248",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.8627816620000001
  },
  "last_update_date": "2024-08-14T15:00:02.463000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-354",
        "trust": 1.0
      },
      {
        "problemtype": "Incomplete data integrity verification (CWE-354) [NVD evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-013859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4929"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.8,
        "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2023-4929"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-013859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4929"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-013859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4929"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-12-22T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2023-013859"
      },
      {
        "date": "2023-10-03T14:15:11.307000",
        "db": "NVD",
        "id": "CVE-2023-4929"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-12-22T02:33:00",
        "db": "JVNDB",
        "id": "JVNDB-2023-013859"
      },
      {
        "date": "2023-10-06T15:28:35.260000",
        "db": "NVD",
        "id": "CVE-2023-4929"
      }
    ]
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0Moxa\u00a0Inc.\u00a0 Vulnerability related to insufficient data integrity verification in products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-013859"
      }
    ],
    "trust": 0.8
  }
}

CVE-2023-4929 (GCVE-0-2023-4929)

Vulnerability from cvelistv5 – Published: 2023-10-03 13:54 – Updated: 2024-09-23 13:29

Title

NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

Summary

Severity ?

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

CWE

CWE-354 - Improper Validation of Integrity Check Value

Assigner

Moxa

References

URL

Tags

https://www.moxa.com/en/support/product-support/s…

vendor-advisory

Impacted products

Vendor

Product

Version

Moxa

NPort 5000AI-M12 Series

Affected: 1.0 , ≤ 1.5 (custom)

Moxa	NPort 5100 Series	Affected: 1.0 , ≤ 3.10 (custom)
Moxa	NPort 5100A Series	Affected: 1.0 , ≤ 1.6 (custom)
Moxa	NPort 5200 Series	Affected: 1.0 , ≤ 2.12 (custom)
Moxa	NPort 5200A Series	Affected: 1.0 , ≤ 1.6 (custom)
Moxa	NPort 5400 Series	Affected: 1.0 , ≤ 3.14 (custom)
Moxa	NPort 5600 Series	Affected: 1.0 , ≤ 3.11 (custom)
Moxa	NPort 5600-DT Series	Affected: 1.0 , ≤ 2.9 (custom)
Moxa	NPort IA5000 Series	Affected: 1.0 , ≤ 2.1 (custom)
Moxa	NPort IA5000A Series	Affected: 1.0 , ≤ 2.0 (custom)
Moxa	NPort IA5000A-I/O Series	Affected: 1.0 , ≤ 2.0 (custom)
Moxa	NPort IAW5000A-I/O Series	Affected: 1.0 , ≤ 2.2 (custom)
Moxa	NPort P5150A Series	Affected: 1.0 , ≤ 1.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:44:52.628Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:moxa:nport_5100ai_m12:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_5100ai_m12",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "1.5",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:nport_5100:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_5100",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "3.10",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:moxa:nport_5100a:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_5100a",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "1.6",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:moxa:nport_5200_series_firmware:2.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_5200_series_firmware",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "2.12",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:moxa:nport_5200a_series_firmware:1.2:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_5200a_series_firmware",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "2.12",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:nport_5600_series_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_5600_series_firmware",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "3.11",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:nport_5600_dt:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_5600_dt",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "2.9",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:nport_ia_5000:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_ia_5000",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "2.1",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:nport_ia_5000a:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_ia_5000a",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "2.0",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:nport_ia_5000a_io:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_ia_5000a_io",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "2.0",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:nport_iaw_5000a_io:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_iaw_5000a_io",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "2.2",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:moxa:nport_p5150a:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "nport_p5150a",
            "vendor": "moxa",
            "versions": [
              {
                "lessThanOrEqual": "1.6",
                "status": "affected",
                "version": "1.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-4929",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T13:08:12.493856Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-23T13:29:04.471Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "NPort 5000AI-M12 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "1.5",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort 5100 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort 5100A Series ",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "1.6",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort 5200 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "2.12",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort 5200A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "1.6",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort 5400 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.14",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort 5600 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "3.11",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort 5600-DT Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "2.9",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort IA5000 Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "2.1",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort IA5000A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "2.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort IA5000A-I/O Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "2.0",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort IAW5000A-I/O Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "2.2",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NPort P5150A Series",
          "vendor": "Moxa",
          "versions": [
            {
              "lessThanOrEqual": "1.6",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAll firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.\u003c/p\u003e"
            }
          ],
          "value": "All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.\n\n"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-145",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-145 Checksum Spoofing"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-354",
              "description": "CWE-354 Improper Validation of Integrity Check Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-03T13:54:49.293Z",
        "orgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
        "shortName": "Moxa"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eDue to design restrictions, we could not fix this vulnerability in NPort 5000 Series. We suggest users follow the instructions in the \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.moxa.com/getmedia/67b5e549-a125-4a6a-b99b-23017c75cfc1/moxa-the-security-hardening-guide-for-the-nport-5000-series-tech-note-v1.1.pdf\"\u003e\u003cu\u003ehardening guide\u003c/u\u003e\u003c/a\u003e in order to mitigate this vulnerability. Additionally, refer to the following mitigation measures to deploy the product in an appropriate product security context. \u003c/p\u003e\u003cp\u003eMoxa recommends users follow these CISA recommendations. Users should \u003c/p\u003e\u003col\u003e\u003cli\u003eReduce network exposure by ensuring that all control system devices and systems are not accessible from the Internet.\u003c/li\u003e\u003cli\u003ePlace control system networks and remote devices behind firewalls, isolating them from business networks.\u003c/li\u003e\u003cli\u003eWhen remote access is necessary, employ secure methods such as Virtual Private Networks (VPNs). It is important to note that VPNs may have vulnerabilities and should be kept up to date with the latest available version. Remember that the security of a VPN depends on the security of its connected devices.\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "Due to design restrictions, we could not fix this vulnerability in NPort 5000 Series. We suggest users follow the instructions in the  hardening guide https://www.moxa.com/getmedia/67b5e549-a125-4a6a-b99b-23017c75cfc1/moxa-the-security-hardening-guide-for-the-nport-5000-series-tech-note-v1.1.pdf  in order to mitigate this vulnerability. Additionally, refer to the following mitigation measures to deploy the product in an appropriate product security context. \n\nMoxa recommends users follow these CISA recommendations. Users should \n\n  *  Reduce network exposure by ensuring that all control system devices and systems are not accessible from the Internet.\n  *  Place control system networks and remote devices behind firewalls, isolating them from business networks.\n  *  When remote access is necessary, employ secure methods such as Virtual Private Networks (VPNs). It is important to note that VPNs may have vulnerabilities and should be kept up to date with the latest available version. Remember that the security of a VPN depends on the security of its connected devices.\n"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2e0a0ee2-d866-482a-9f5e-ac03d156dbaa",
    "assignerShortName": "Moxa",
    "cveId": "CVE-2023-4929",
    "datePublished": "2023-10-03T13:54:49.293Z",
    "dateReserved": "2023-09-13T01:12:13.466Z",
    "dateUpdated": "2024-09-23T13:29:04.471Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

VAR-202310-2248

CVE-2023-4929 (GCVE-0-2023-4929)

Tags

Sightings

Nomenclature