Lucene search

K
cve[email protected]CVE-2017-16715
HistoryNov 16, 2017 - 9:29 p.m.

CVE-2017-16715

2017-11-1621:29:00
CWE-200
web.nvd.nist.gov
29
cve-2017-16715
information exposure
moxa nport
ethernet
vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.6%

An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame padding that may allow for information exposure.

Affected configurations

NVD
Node
moxanport_5110_firmwareMatch2.2
OR
moxanport_5110_firmwareMatch2.4
OR
moxanport_5110_firmwareMatch2.6
OR
moxanport_5110_firmwareMatch2.7
AND
moxanport_5110Match-
Node
moxanport_5130_firmwareRange3.7
AND
moxanport_5130Match-
Node
moxanport_5150_firmwareRange3.7
AND
moxanport_5150Match-

CNA Affected

[
  {
    "product": "Moxa NPort 5110, 5130, and 5150",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Moxa NPort 5110, 5130, and 5150"
      }
    ]
  }
]

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.6%

Related for CVE-2017-16715