CVEvulnerability

CVE-2023-4929

8.8 HIGH Published 2023-10-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-354

Description

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Affected configurations

• moxa nport 5150ai-m12-ct-t firmware (<= 1.5) • moxa nport 5250ai-m12-ct-t firmware (<= 1.5) • moxa nport 5150ai-m12-t firmware (<= 1.5) • moxa nport 5250ai-m12-t firmware (<= 1.5) • moxa nport 5450ai-m12-ct-t firmware (<= 1.5) • moxa nport 5150ai-m12 firmware (<= 1.5) • moxa nport 5250ai-m12 firmware (<= 1.5) • moxa nport 5150ai-m12-ct firmware (<= 1.5) • moxa nport 5250ai-m12-ct firmware (<= 1.5) • moxa nport 5450ai-m12-t firmware (<= 1.5) • moxa nport 5450ai-m12 firmware (<= 1.5) • moxa nport 5450ai-m12-ct firmware (<= 1.5) • moxa nport 5130 firmware (<= 3.10) • moxa nport 5150 firmware (<= 3.10) • moxa nport 5110 firmware (<= 2.10) • moxa nport 5110-t firmware (<= 2.10) • moxa nport 5110a firmware (<= 1.6) • moxa nport 5110a-t firmware (<= 1.6) • moxa nport 5130a firmware (<= 1.6) • moxa nport 5130a-t firmware (<= 1.6) • moxa nport 5150a firmware (<= 1.6) • moxa nport 5150a-t firmware (<= 1.6) • moxa nport 5210a firmware (<= 1.6) • moxa nport 5210a-t firmware (<= 1.6) • moxa nport 5230a firmware (<= 1.6) • moxa nport 5230a-t firmware (<= 1.6) • moxa nport 5250a firmware (<= 1.6) • moxa nport 5250a-t firmware (<= 1.6) • moxa nport 5210 firmware (<= 2.12) • moxa nport 5232 firmware (<= 2.12) • moxa nport 5210-t firmware (<= 2.12) • moxa nport 5232-t firmware (<= 2.12) • moxa nport 5230-t firmware (<= 2.12) • moxa nport 5232i-t firmware (<= 2.12) • moxa nport 5230 firmware (<= 2.12) • moxa nport 5232i firmware (<= 2.12) • moxa nport 5410 firmware (>= 2.0 <= 2.9) • moxa nport 5410 firmware (>= 3.2 <= 3.14) • moxa nport 5430 firmware (>= 2.0 <= 2.9) • moxa nport 5430 firmware (>= 3.2 <= 3.14) • moxa nport 5450 firmware (<= 3.14) • moxa nport 5450i firmware (<= 3.14) • moxa nport 5450-t firmware (<= 3.14) • moxa nport 5450i-t firmware (<= 3.14) • moxa nport 5610-8-48v firmware (<= 3.11) • moxa nport 5630-16 firmware (<= 3.11) • moxa nport 5630-8 firmware (<= 3.11) • moxa nport 5650-8 firmware (<= 3.11) • moxa nport 5610-16 firmware (<= 3.11) • moxa nport 5650-8-m-sc firmware (<= 3.11) • moxa nport 5650-8-t firmware (<= 3.11) • moxa nport 5650-16-s-sc firmware (<= 3.11) • moxa nport 5650-8-hv-t firmware (<= 3.11) • moxa nport 5650-16-t firmware (<= 3.11) • moxa nport 5650-16 firmware (<= 3.11) • moxa nport 5650-16-hv-t firmware (<= 3.11) • moxa nport 5610-8 firmware (<= 3.11) • moxa nport 5610-16-48v firmware (<= 3.11) • moxa nport 5650-8-s-sc firmware (<= 3.11) • moxa nport 5650-16-m-sc firmware (<= 3.11) … and 68 more

Related

Weakness · CWE (1)

  • CWE-354 Improper Validation of Integrity Check Value weakness

References