CVE-2023-5627

Incorrect Implementation of Authentication Algorithm Vulnerability

State: Published
Severity: 7.5 High
Published: Nov 1, 2023
Updated: Sep 5, 2024
Reserved: Oct 18, 2023

Description

A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	Moxa

Weaknesses

CWE-303 Incorrect Implementation of Authentication Algorithm
CWE-257 Storing Passwords in a Recoverable Format
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Affected Products

Product	Versions
NPort 6000 SeriesMoxa	1.0 through 1.21Affected

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.