The vulnerability of Moxa NPort asynchronous server’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to execute arbitrary code.

🗓️ 04 May 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Moxa NPort server microprogramming has authentication flaws enabling remote arbitrary code execution.

Reporter	Title	Published	Views	Family All 22
Circl	CVE-2016-9361	29 May 201815:50	–	circl
CNVD	Moxa NPort Credential Management Vulnerability	5 Dec 201600:00	–	cnvd
CVE	CVE-2016-9361	13 Feb 201721:00	–	cve
Cvelist	CVE-2016-9361	13 Feb 201721:00	–	cvelist
ICS	Moxa NPort Device Vulnerabilities (Update A)	1 Dec 201600:00	–	ics
ICS	Moxa NPort Device Vulnerabilities	4 Sep 201606:00	–	ics
Metasploit	Moxa Device Credential Retrieval	16 May 201714:21	–	metasploit
Metasploit	Moxa UDP Device Discovery	22 Mar 201714:49	–	metasploit
NVD	CVE-2016-9361	13 Feb 201721:59	–	nvd
OpenVAS	Moxa NPort Devices Multiple Vulnerabilities (MCSA-160401)	16 Feb 201700:00	–	openvas

Vulners

Node

moxa nport_ia5450aRange<1.4

OR

moxa nport_5110Range<2.7

OR

moxa nport_5130/5150Range<3.7

OR

moxa nport_5200Range<2.9

OR

moxa nport_5400Range<3.12

OR

moxa nport_5600Range<3.8

OR

moxa nport_5100aRange<1.4

OR

moxa nport_p5150aRange<1.4

OR

moxa nport_5200aRange<1.4

OR

moxa nport_5150ai-m12Range<1.3

OR

moxa nport_5250ai-m12Range<1.3

OR

moxa nport_5450ai-m12Range<1.3

OR

moxa nport_5600-8-dtRange<2.5

OR

moxa nport_5600-8-dtlRange<2.5

OR

moxa nport_6000Range<1.16

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-9361
securityfocus	www.securityfocus.com/bid/85965
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-16-336-02
web	www.web.nvd.nist.gov/view/vuln/detail

04 May 2023 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 39.8

CVSS 210

EPSS0.19856

Moxa NPort server microprogramming authentication flaws remote execution arbitrary code