CVE-2021-32974

🗓️ 01 Apr 2022 22:17:13Reported by icscertType

Improper input validation in Moxa NPort IAW5000A-I/O built-in web server allowing remote command execution

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-32974	2 Apr 202202:26	–	circl
CNNVD	MOXA NPort IAW5000A-I/O Series 操作系统命令注入漏洞	6 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-32974 Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation	1 Apr 202222:17	–	cvelist
EUVD	EUVD-2021-19695	7 Oct 202500:30	–	euvd
ICS	Moxa NPort IAW5000A-I/O Series Serial Device Server	6 Jul 202100:00	–	ics
NVD	CVE-2021-32974	1 Apr 202223:15	–	nvd
OSV	CVE-2021-32974	1 Apr 202223:15	–	osv
Prion	Input validation	1 Apr 202223:15	–	prion
Positive Technologies	PT-2022-10169 · Moxa · Moxa Nport Iaw5000A-I/O	1 Apr 202200:00	–	ptsecurity
RedhatCVE	CVE-2021-32974	22 May 202519:46	–	redhatcve

NVD

Vulners

Node

AND

moxa nport_iaw5150a-6i/o_firmwareRange≤2.2

moxa nport_iaw5150a-6i/oMatch-

Node

AND

moxa nport_iaw5150a-12i/o_firmwareRange≤2.2

moxa nport_iaw5150a-12i/oMatch-

Node

AND

moxa nport_iaw5250a-6i/o_firmwareRange≤2.2

moxa nport_iaw5250a-6i/oMatch-

Node

AND

moxa nport_iaw5250a-12i/o_firmwareRange≤2.2

moxa nport_iaw5250a-12i/oMatch-

[
  {
    "product": "NPort IAW5000A-I/O series firmware",
    "vendor": "Moxa",
    "versions": [
      {
        "lessThanOrEqual": "2.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
moxa	www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-187-01

17 Jun 2026 03:53Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

CVSS 210

EPSS0.02593

SSVC