Lucene search

K
cvelistMoxaCVELIST:CVE-2023-5627
HistoryNov 01, 2023 - 3:04 p.m.

CVE-2023-5627 Incorrect Implementation of Authentication Algorithm Vulnerability

2023-11-0115:04:13
CWE-303
CWE-257
CWE-327
Moxa
www.cve.org
cve-2023-5627
incorrect implementation
authentication
vulnerability
nport 6000 series
sensitive information protection
unauthorized access
web service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NPort 6000 Series",
    "vendor": "Moxa",
    "versions": [
      {
        "lessThanOrEqual": "1.21",
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      }
    ]
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

Related for CVELIST:CVE-2023-5627