CVE-2023-4929

NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

State: Published
Severity: 6.5 Medium
Published: Oct 3, 2023
Updated: Sep 23, 2024
Reserved: Sep 13, 2023

Description

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H	Moxa

Weaknesses

CWE-354 Improper Validation of Integrity Check Value

Affected Products

Product	Versions
NPort 5000AI-M12 SeriesMoxa	1.0 through 1.5Affected
NPort 5100 SeriesMoxa	1.0 through 3.10Affected
NPort 5100A SeriesMoxa	1.0 through 1.6Affected
NPort 5200 SeriesMoxa	1.0 through 2.12Affected
NPort 5200A SeriesMoxa	1.0 through 1.6Affected
NPort 5400 SeriesMoxa	1.0 through 3.14Affected
NPort 5600 SeriesMoxa	1.0 through 3.11Affected
NPort 5600-DT SeriesMoxa	1.0 through 2.9Affected
NPort IA5000 SeriesMoxa	1.0 through 2.1Affected
NPort IA5000A SeriesMoxa	1.0 through 2.0Affected
NPort IA5000A-I/O SeriesMoxa	1.0 through 2.0Affected
NPort IAW5000A-I/O SeriesMoxa	1.0 through 2.2Affected
NPort P5150A SeriesMoxa	1.0 through 1.6Affected

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.