All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain co
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.
| Vendor | Product | Versions |
|---|---|---|
| Moxa | NPort 5000AI | M12 Series — 1.0 |
| Moxa | NPort 5100 Series | 1.0 |
| Moxa | NPort 5100A Series | 1.0 |
| Moxa | NPort 5200 Series | 1.0 |
| Moxa | NPort 5200A Series | 1.0 |
| Moxa | NPort 5400 Series | 1.0 |
| Moxa | NPort 5600 Series | 1.0 |
| Moxa | NPort 5600 | DT Series — 1.0 |
| Moxa | NPort IA5000 Series | 1.0 |
| Moxa | NPort IA5000A Series | 1.0 |
| Moxa | NPort IA5000A | I/O Series — 1.0 |
| Moxa | NPort IAW5000A | I/O Series — 1.0 |
| Moxa | NPort P5150A Series | 1.0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.