Design/Logic Flaw

2021-05-1412:15:00

PRIOn knowledge base

www.prio-n.com

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed.

References

ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-018%2C

www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities