CVEvulnerability
CVE-2023-5627
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-11-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-257, CWE-287, CWE-303, CWE-327
Description
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.
Affected configurations
• moxa nport 6150-t firmware (<= 1.21)
• moxa nport 6150 firmware (<= 1.21)
• moxa nport 6250-m-sc-t firmware (<= 1.21)
• moxa nport 6250-m-sc firmware (<= 1.21)
• moxa nport 6250-s-sc-t firmware (<= 1.21)
• moxa nport 6250-s-sc firmware (<= 1.21)
• moxa nport 6250-t firmware (<= 1.21)
• moxa nport 6250 firmware (<= 1.21)
• moxa nport 6450-t firmware (<= 1.21)
• moxa nport 6450 firmware (<= 1.21)
• moxa nport 6610-16-48v firmware (<= 1.21)
• moxa nport 6610-16 firmware (<= 1.21)
• moxa nport 6610-32-48v firmware (<= 1.21)
• moxa nport 6610-32 firmware (<= 1.21)
• moxa nport 6610-8-48v firmware (<= 1.21)
• moxa nport 6610-8 firmware (<= 1.21)
• moxa nport 6650-16-48v firmware (<= 1.21)
• moxa nport 6650-16-hv-t firmware (<= 1.21)
• moxa nport 6650-16-t firmware (<= 1.21)
• moxa nport 6650-16 firmware (<= 1.21)
• moxa nport 6650-32-48v firmware (<= 1.21)
• moxa nport 6650-32-hv-t firmware (<= 1.21)
• moxa nport 6650-32 firmware (<= 1.21)
• moxa nport 6650-8-48v firmware (<= 1.21)
• moxa nport 6650-8-hv-t firmware (<= 1.21)
• moxa nport 6650-8-t firmware (<= 1.21)
• moxa nport 6650-8 firmware (<= 1.21)
Related
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerability Vendor Advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerability Vendor Advisory