CVE-2020-27149

🗓️ 14 May 2021 11:13:37Reported by KasperskyType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 41 Views

CVE-2020-27149: Privilege escalation vulnerability in NPort IA5150A/IA5250A Serie

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2020-27149	14 May 202112:15	–	attackerkb
CNNVD	MOXA NPort IA5150A 访问控制错误漏洞	28 Apr 202100:00	–	cnnvd
Cvelist	CVE-2020-27149	14 May 202111:13	–	cvelist
EUVD	EUVD-2020-19673	7 Oct 202500:30	–	euvd
NVD	CVE-2020-27149	14 May 202112:15	–	nvd
OSV	CVE-2020-27149	14 May 202112:15	–	osv
Prion	Design/Logic Flaw	14 May 202112:15	–	prion
RedhatCVE	CVE-2020-27149	22 May 202517:33	–	redhatcve
Tenable Nessus	Moxa NPort IA5150A/IA5250A Series Improper Access Control (CVE-2020-27149)	2 Aug 202300:00	–	nessus

NVD

Node

moxa nport_ia5150a_firmwareRange<1.5

AND

moxa nport_ia5150aMatch-

Node

moxa nport_ia5250a_firmwareRange<1.5

AND

moxa nport_ia5250aMatch-

Node

moxa nport_ia5450a_firmwareRange<2.0

AND

moxa nport_ia5450aMatch-

[
  {
    "product": "NPort IA5000A Series with web console enabled",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions before 1.5 for NPort IA5150A/IA5250A Series. All version before 2.0 for NPort 5450 Series"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-018%2C
moxa	www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities

21 Nov 2024 05:20Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24

CVSS 3.16.5

EPSS0.00336