Moxa NPort Buffer Overflow Vulnerability

MOXA Nport is a serial communication server. A buffer overflow vulnerability exists in Moxa NPort. An unauthenticated, remote attacker could exploit the vulnerability to execute arbitrary code...

Moxa NPort Denial of Service Vulnerability

MOXA Nport is a serial communication server. A denial of service vulnerability exists in Moxa NPort. Due to an unlimited number of requests for resources, an attacker can exploit the vulnerability to cause a denial of service due to resource exhaustion...

Moxa NPort Cross-Site Request Forgery Vulnerability

MOXA Nport is a serial communication server. A cross-site request forgery vulnerability exists in Moxa NPort. An attacker can exploit the vulnerability to launch a cross-site request attack because a user-submitted request is not validated...

Moxa NPort Credential Management Vulnerability

MOXA Nport is a serial communication server. A credential management vulnerability exists in the Moxa NPort. An unauthenticated attacker could exploit the vulnerability to obtain the administrator password...

Moxa NPort Access Control Vulnerability

MOXA Nport is a serial communication server. An access control vulnerability exists in the Moxa NPort. An unauthenticated attacker can exploit the vulnerability to update the firmware and execute arbitrary code...

PT-2016-3446

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions prior to 2.6 Moxa NPort 5130/5150 Series versions prior to 3.6 Moxa NPort 5200 Series versions prior to 2.8 Moxa NPort 5400 Series versions prior to 3.11 Moxa NPort 5600 Series versions prior to 3.7 Moxa NPort 5100A...

Moxa NPort 5232-N Serial-to-Ethernet Device (All Versions) Web Console Authentication Bypass

Binary data 9576.prm...

Moxa NPort 5232-N Serial-to-Ethernet Device Version Detection (SCADA)

Binary data 9575.prm...

Moxa NPort Device Vulnerabilities

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-336-02 Moxa NPort Device Vulnerabilities that was published December 1, 2016, on the NCCIC/ICS-CERT web site. Security researchers Reid Wightman of RevICS Security, Mikael Vingaard, and Maxim Rupp have identifie...

Null Password Vulnerability in Nport 5110 Devices of Mosaic Technology (Shanghai) Co.

The MOXA Nport 5110 is a serial communication server. A null password vulnerability exists in the MOXA Nport 5110 device, which allows an attacker to exploit the vulnerability to log in to the system backend, gain administrator privileges, and obtain sensitive information about the device...

Unauthorized Access Vulnerability in Nport 5110 Devices of Mosaic Technology (Shanghai) Co.

The MOXA Nport 5110 is a serial communication server. An unauthorized access warrant vulnerability exists in the MOXA Nport 5110 device, which could be exploited by an attacker to obtain sensitive information about the device...

Moxa Discontinuing Vulnerable Line of ICS Devices

A vulnerability that exists in embedded computers manufactured by Moxa could allow remote authenticated users to overwrite firmware, in turn rendering the devices unusable. Moxa, a Taiwan-based networking company, announced recently that instead of patching the line of products affected by the...

Moxa NPort Serial-to-Ethernet Server Detection

Binary data scadamoxanportdetect.nbin...

Moxa NPort Serial-to-Ethernet Server Multiple Vulnerabilities

Binary data scadamoxanportics-alert-16-099-01.nbin...

Moxa Won't Patch Publicly Disclosed Flaws Until August

Update A number of publicly disclosed vulnerabilities in Moxa networking gear won’t be patched until August, if at all, according to an alert published on Friday by the Industrial Control System Cyber Emergency Response Team ICS-CERT. Researcher Joakim Kennedy of Rapid7 disclosed in March some...

Moxa Device Server Web Console Authorization Bypass Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified an authorization bypass vulnerability in Moxa’s Device Server Web Console. Moxa has indicated the NPort 5232-N was discontinued in 2012 and has produced recommendations to mitigate this vulnerability. This vulnerability could be exploited...

PT-2016-3218

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions prior to 2.6 Moxa NPort 5130/5150 Series versions prior to 3.6 Moxa NPort 5200 Series versions prior to 2.8 Moxa NPort 5400 Series versions prior to 3.11 Moxa NPort 5600 Series versions prior to 3.7 Moxa NPort 5100A...

Moxa NPort's web console! 未授权访问

No description provided by source...

Moxa NPort Unprotected Console (Telnet)

The remote Moxa NPort Telnet Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Moxa NPort Unprotected Console (HTTP)

The remote Moxa NPort Web Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...