CVEvulnerability

CVE-2023-5627

7.5 HIGH Published 2023-11-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-257, CWE-287, CWE-303, CWE-327

Description

A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.

Affected configurations

• moxa nport 6150-t firmware (<= 1.21) • moxa nport 6150 firmware (<= 1.21) • moxa nport 6250-m-sc-t firmware (<= 1.21) • moxa nport 6250-m-sc firmware (<= 1.21) • moxa nport 6250-s-sc-t firmware (<= 1.21) • moxa nport 6250-s-sc firmware (<= 1.21) • moxa nport 6250-t firmware (<= 1.21) • moxa nport 6250 firmware (<= 1.21) • moxa nport 6450-t firmware (<= 1.21) • moxa nport 6450 firmware (<= 1.21) • moxa nport 6610-16-48v firmware (<= 1.21) • moxa nport 6610-16 firmware (<= 1.21) • moxa nport 6610-32-48v firmware (<= 1.21) • moxa nport 6610-32 firmware (<= 1.21) • moxa nport 6610-8-48v firmware (<= 1.21) • moxa nport 6610-8 firmware (<= 1.21) • moxa nport 6650-16-48v firmware (<= 1.21) • moxa nport 6650-16-hv-t firmware (<= 1.21) • moxa nport 6650-16-t firmware (<= 1.21) • moxa nport 6650-16 firmware (<= 1.21) • moxa nport 6650-32-48v firmware (<= 1.21) • moxa nport 6650-32-hv-t firmware (<= 1.21) • moxa nport 6650-32 firmware (<= 1.21) • moxa nport 6650-8-48v firmware (<= 1.21) • moxa nport 6650-8-hv-t firmware (<= 1.21) • moxa nport 6650-8-t firmware (<= 1.21) • moxa nport 6650-8 firmware (<= 1.21)

Related

Weakness · CWE (4)

  • CWE-257 Storing Passwords in a Recoverable Format weakness
  • CWE-287 Improper Authentication weakness
  • CWE-303 Incorrect Implementation of Authentication Algorithm weakness
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References