Moxa Nport IA5250A Firmware vulnerabilities

5 CVEs affecting Moxa Nport IA5250A Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4929, published 2023-10-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-27150, published 2021-05-14. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the system and other sensitive data in the original form if…
CVE-2020-27185, published 2021-05-14. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data,…
CVE-2020-27149, published 2021-05-14. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration…
CVE-2020-27184, published 2021-05-14. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. The NPort IA5000A Series devices use Telnet as one of the network device management services. Telnet does not support the encryption of client-server communications, making it vulnerable to…
CVE-2023-4929, published 2023-10-03. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or…