Lucene search

[email protected]CVE-2016-9365

HistoryFeb 13, 2017 - 9:59 p.m.

CVE-2016-9365

2017-02-1321:59:02

CWE-352

[email protected]

web.nvd.nist.gov

cve-2016-9365

moxa

nport

security

vulnerability

csrf

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. Requests are not verified to be intentionally submitted by the proper user (CROSS-SITE REQUEST FORGERY).

Affected configurations

NVD

Node

moxanport_5100_series_firmwareRange≤2.5

AND

moxanport_5110Match-

Node

moxanport_5100_series_firmwareRange≤3.5

AND

moxanport_5130Match-

moxanport_5150Match-

Node

moxanport_5200_series_firmwareRange≤2.7

AND

moxanport_5210Match-

moxanport_5230Match-

moxanport_5232Match-

moxanport_5232iMatch-

Node

moxanport_5400_series_firmwareRange≤3.10

AND

moxanport_5410Match-

moxanport_5430Match-

moxanport_5430iMatch-

moxanport_5450Match-

moxanport_5450-tMatch-

moxanport_5450iMatch-

moxanport_5450i-tMatch-

Node

moxanport_5600_series_firmwareRange≤3.6

AND

moxanport_5610Match-

moxanport_5630Match-

moxanport_5650Match-

Node

moxanport_5100a_series_firmwareRange≤1.2

AND

moxanport_5110aMatch-

moxanport_5130aMatch-

moxanport_5150aMatch-

Node

moxanport_p5150a_series_firmwareRange≤1.2

AND

moxanport_p5110aMatch-

Node

moxanport_5200a_series_firmwareRange≤1.2

AND

moxanport_5210aMatch-

moxanport_5230aMatch-

moxanport_5250aMatch-

Node

moxanport_5x50a1-m12_series_firmwareRange≤1.1

AND

moxanport_5150a1-m12Match-

moxanport_5150a1-m12-ctMatch-

moxanport_5150a1-m12-ct-tMatch-

moxanport_5150a1-m12-tMatch-

moxanport_5250a1-m12Match-

moxanport_5250a1-m12-ctMatch-

moxanport_5250a1-m12-ct-tMatch-

moxanport_5250a1-m12-tMatch-

moxanport_5450a1-m12Match-

moxanport_5450a1-m12-ctMatch-

moxanport_5450a1-m12-ct-tMatch-

moxanport_5450a1-m12-tMatch-

Node

moxanport_5600-8-dtl_series_firmwareRange≤2.3

AND

moxanport_5610-8-dtlMatch-

moxanport_5650-8-dtlMatch-

moxanport_5650i-8-dtlMatch-

Node

moxanport_6100_series_firmwareRange≤1.13

AND

moxanport_6150Match-

moxanport_6150-tMatch-

CPENameOperatorVersion
moxa:nport_5100_series_firmwaremoxa nport 5100 series firmwarele2.5

CPE	Name	Operator	Version
moxa:nport_5100_series_firmware	moxa nport 5100 series firmware	le	2.5

CNA Affected

[
  {
    "product": "Moxa NPort",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Moxa NPort"
      }
    ]
  }
]

References

www.securityfocus.com/bid/85965

ics-cert.us-cert.gov/advisories/ICSA-16-336-02

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

Related for CVE-2016-9365

nvd1 prion1 cvelist1 nessus1 ics2 openvas1