EUVD-2020-19673

Malware in sbrugna...

Moxa NPort IA5150A/IA5250A Series Improper Access Control (CVE-2020-27149)

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with Read Only privilege level can send requests via the web console to have the device's configuration changed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-o...

NPort IA5150A/IA5250A/IA5450A Telnet Information Disclosure

The vulnerability of the serial interface converters NPort IA5150A/IA5250A, IA5450A lies in the lack of protection for transmitted data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information through Telnet connections...

NPort IA5150A/IA5250A IA5450A Password Storage

The vulnerability of the serial interface converters NPort IA5150A/IA5250A, IA5450A lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

Design/Logic Flaw

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

CVE-2020-27149

CVE-2020-27149 affects MOXA NPort IA5150A/IA5250A Series prior to firmware 1.5. The root cause is an improper access control that lets a Read-Only user send requests via the web console to modify device configuration. Impact is device configuration changes with no conf confidentiality or availabi...

CVE-2020-27149: Undefined Security Weakness

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

PT-2021-3066

Name of the Vulnerable Software and Affected Versions NPort IA5150A/IA5250A Series versions prior to 1.5 Description The issue is related to inadequate access control in the NPort IA5150A/IA5250A Series, allowing a user with "Read Only" privilege level to send requests via the web console to chan...

PT-2021-3065

Name of the Vulnerable Software and Affected Versions NPort IA5150A/IA5250A, IA5450A versions affected versions not specified NPort IA5000A Series versions affected versions not specified Description The issue is related to the storage of passwords in plaintext. This could allow a remote attacker...

PT-2021-3064

Name of the Vulnerable Software and Affected Versions NPort IA5000A Series devices affected versions not specified NPort IA5150A/IA5250A, IA5450A devices affected versions not specified Description The issue is related to the use of Telnet for network device management, which does not support...