Moxa NPort Unauthenticated Firmware Update (CVE-2016-9369)

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...

CVE-2016-9369

CVE-2016-9369 affects Moxa NPort devices (multiple models/series) where firmware can be updated over the network without authentication, potentially allowing remote code execution. Impact: complete compromise of affected systems as per ICS-CERT/NVD notes (CVSS v3 base 9.8). Affected versions incl...