MOXA NPort IAW5000A-I/O Series Cleartext Transmission of Sensitive Information (CVE-2020-25190)

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

CVE-2020-25190

The CVE-2020-25190 issue affects MOXA NPort IAW5000A-I/O Series, where the built-in WEB server in firmware v2.1 or lower stores and transmits third‑party service credentials in cleartext. This creates an exposure risk for credentials transmitted over the network, with CVSSv3.1 base score 9.8 (NET...