NPort IAW5000A-I/O Series 缓冲区错误漏洞

MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, Taiwan, China. The server enables integration of field serial devices with wireless Ethernet networks and incorporates digital IO for industrial data acquisition applications. A security...

MOXA NPort IAW5000A-I/O Series 安全漏洞

MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, Taiwan, China. The server enables the integration of field serial devices with wireless Ethernet networks and incorporates digital IOs for industrial data acquisition applications. A security...

CVE-2020-25153

The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords...

CVE-2020-25194

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges...

CVE-2020-25153

The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords...

CVE-2020-25190

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext...

CVE-2020-25198

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies...

CVE-2020-25198

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies...

CVE-2020-25192

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization...

CVE-2020-25196

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication...

Authorization

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization...

Authentication flaw

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication...

Session fixation

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies...

Code injection

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext...

CVE-2020-25196

The CVE-2020-25196 issue affects MOXA NPort IAW5000A-I/O Series where the built-in WEB server in firmware 2.1 or lower allows SSH/Telnet sessions, potentially enabling brute-force authentication to bypass access controls. Affected product: NPort IAW5000A-I/O Series (Firmware Version 2.1 or lower)...

CVE-2020-25196 MOXA NPort IAW5000A-I/O Series

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication...

CVE-2020-25153 MOXA NPort IAW5000A-I/O Series

The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords...

CVE-2020-25153

The CVE-2020-25153 vulnerability affects MOXA NPort IAW5000A-I/O Series with firmware

CVE-2020-25192

Summary: CVE-2020-25192 affects MOXA NPort IAW5000A-I/O Series with firmware version 2.1 or lower, where the built-in WEB server can display sensitive information without proper authorization. Affected product/version: NPort IAW5000A-I/O Series, firmware 2.1 or lower. Root cause / vulnerability t...

CVE-2020-25192 MOXA NPort IAW5000A-I/O Series

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization...