CVE-2017-16727

Published: Dec 22, 2017Modified: May 13, 2026

9.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The default password is empty on the device. An unauthorized user can access the device without a password. An unauthorized user has the ability to completely compromise the confidentiality and integrity of the wireless traffic.

Affected (2)

Products: Moxa: Nport W2150a Firmware, Nport W2250a Firmware

2 products

Nport W2150a Firmware

Nport W2250a Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Nport W2150a Firmware	Before 1.11

Running on/with	Platform Versions
Moxa Nport W2150a	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Nport W2250a Firmware	Before 1.11

Running on/with	Platform Versions
Moxa Nport W2250a	All versions

Related CWEs

Weak Password Requirements

The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

References (4)

http://www.securityfocus.com/bid/102254

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-17-355-01

Source: ics-cert@hq.dhs.gov

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/102254

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-17-355-01

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

Timeline

No history available yet.