CVE-2020-27149

2021-05-1411:13:37

Kaspersky

www.cve.org

vulnerability

nport ia5150a

nport ia5250a

unauthorized access

configuration changes

EPSS

0.001

Percentile

22.7%

JSON

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed.

CNA Affected

[
  {
    "product": "NPort IA5000A Series with web console enabled",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions before 1.5 for NPort IA5150A/IA5250A Series. All version before 2.0 for NPort 5450 Series"
      }
    ]
  }
]