EUVD-2020-19673

Malware in sbrugna...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

Moxa NPort IA5150A/IA5250A Series Improper Access Control (CVE-2020-27149)

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with Read Only privilege level can send requests via the web console to have the device's configuration changed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-o...

The vulnerability of the serial interface converters NPort IA5150A/IA5250A, IA5450A lies in the lack of protection for transmitted data. This allows attackers to gain unauthorized access to protected information through Telnet connections.

The vulnerability of the serial interface converters NPort IA5150A/IA5250A, IA5450A lies in the lack of protection for transmitted data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information through Telnet connections...

The vulnerability of the serial interface converters NPort IA5150A/IA5250A, IA5450A lies in the storage of passwords in an unencrypted form, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the serial interface converters NPort IA5150A/IA5250A, IA5450A lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

Design/Logic Flaw

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

CVE-2020-27149

CVE-2020-27149 affects MOXA NPort IA5150A/IA5250A Series prior to firmware 1.5. The root cause is an improper access control that lets a Read-Only user send requests via the web console to modify device configuration. Impact is device configuration changes with no conf confidentiality or availabi...

CVE-2020-27149: Undefined Security Weakness

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

Moxa NPort IA5150A Series Sensitive Information Explicit Transmission Vulnerability

The Moxa NPort IA5150A Series is a set of industrial control device servers.The Moxa NPort IA5150A Series is vulnerable to the transfer of sensitive information in clear text, allowing remote attackers to exploit the vulnerability to submit special requests that can obtain sensitive information...

Moxa NPort IA5150A Series Credential Explicit Storage Vulnerability

Moxa NPort IA5150A Series is a set of industrial control device servers.The Moxa NPort IA5150A Series is vulnerable to a credential plaintext storage vulnerability, which can be exploited by remote attackers to submit ad hoc requests that can obtain sensitive information...

PT-2021-3066

Name of the Vulnerable Software and Affected Versions NPort IA5150A/IA5250A Series versions prior to 1.5 Description The issue is related to inadequate access control in the NPort IA5150A/IA5250A Series, allowing a user with "Read Only" privilege level to send requests via the web console to chan...

PT-2021-3064

Name of the Vulnerable Software and Affected Versions NPort IA5000A Series devices affected versions not specified NPort IA5150A/IA5250A, IA5450A devices affected versions not specified Description The issue is related to the use of Telnet for network device management, which does not support...

MOXA NPort IA5150A Series 安全漏洞

Moxa NPort IA5150A Series is a set of industrial control device servers.The Moxa NPort IA5150A Series is vulnerable to a credential plaintext storage vulnerability, which can be exploited by remote attackers to submit ad hoc requests that can obtain sensitive information...

MOXA NPort IA5150A Series 安全漏洞

The Moxa NPort IA5150A Series is a set of industrial control device servers.The Moxa NPort IA5150A Series is vulnerable to the transfer of sensitive information in clear text, allowing remote attackers to exploit the vulnerability to submit special requests that can obtain sensitive information...

MOXA Moxa NPort IA5150A Series 加密问题漏洞

MOXA Moxa NPort IA5150A Series is an industrial control device server from China Moxa MOXA. It is used for 1-port RS-232 / 422/485 industrial automation device server with serial/LAN/power surge protection, two 10/100BaseTX ports with single IP, and operating temperature from 0 to 60°C. The NPort...

PT-2021-3065

Name of the Vulnerable Software and Affected Versions NPort IA5150A/IA5250A, IA5450A versions affected versions not specified NPort IA5000A Series versions affected versions not specified Description The issue is related to the storage of passwords in plaintext. This could allow a remote attacker...