CVEvulnerability

CVE-2020-27185

7.5 HIGH Published 2021-05-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-05-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-319

Description

Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, device configuration, and other sensitive data transmitted over Moxa Service.

Affected configurations

• moxa nport ia5150a firmware (<= 1.4) • moxa nport ia5250a firmware (<= 1.4) • moxa nport ia5450a firmware (<= 1.7)

Related

Weakness · CWE (1)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References