97 matches found
PT-2022-10168
Name of the Vulnerable Software and Affected Versions Moxa NPort IAW5000A-I/O series firmware versions prior to 2.3 Description The issue allows data to be copied without validation in the built-in web server, potentially enabling a remote attacker to cause denial-of-service conditions...
CVE-2021-32970: Improper Input Validation
Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions...
PT-2022-10167
Name of the Vulnerable Software and Affected Versions Moxa NPort IAW5000A-I/O Series firmware versions prior to 2.3 Description The issue is related to two buffer overflows in the built-in web server, which may allow a remote attacker to cause a denial-of-service condition. Recommendations For...
PT-2022-10170
Name of the Vulnerable Software and Affected Versions Moxa NPort IAW5000A-I/O series firmware versions 2.2 or earlier Description The issue is related to five buffer overflows in the built-in web server of the Moxa NPort IAW5000A-I/O series. This may allow a remote attacker to initiate a...
CVE-2021-32968: Buffer Copy without Checking Size of Input
Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may allow a remote attacker to cause a denial-of-service condition...
CVE-2021-32974: Improper Input Validation
Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands...
PT-2022-10169 · Moxa · Moxa Nport Iaw5000A-I/O
Name of the Vulnerable Software and Affected Versions: Moxa NPort IAW5000A-I/O series firmware versions 2.2 or earlier Description: The issue is related to improper input validation in the built-in web server, which may allow a remote attacker to execute commands. Recommendations: For Moxa NPort...
CVE-2021-32976: Stack-based Buffer Overflow
Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code...
NPort IAW5000A-I/O Series 缓冲区错误漏洞
MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, Taiwan, China. The server enables integration of field serial devices with wireless Ethernet networks and incorporates digital IO for industrial data acquisition applications. A security...
MOXA NPort IAW5000A-I/O Series 安全漏洞
MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, Taiwan, China. The server enables the integration of field serial devices with wireless Ethernet networks and incorporates digital IOs for industrial data acquisition applications. A security...
Moxa NPort IAW5000A-I/O Series Serial Device Server
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Moxa Equipment: NPort IAW5000A-I/O Series Wireless Device Server Vulnerabilities: Classic Buffer Overflow, Stack-based Buffer Overflow, Improper Input Validation, OS Command Injection 2. RISK EVALUATION...
CVE-2020-25194
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges...
CVE-2020-25153
The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords...
CVE-2020-25198
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies...
CVE-2020-25153
The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords...
CVE-2020-25190
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext...
CVE-2020-25192
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization...
CVE-2020-25196
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication...
CVE-2020-25198
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies...
