← Back

CVE-2020-27149

nvd nist
Published: May 14, 2021Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed.

Affected (3)

Moxa
3 products
Nport Ia5150a Firmware
Nport Ia5250a Firmware
Nport Ia5450a Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nport Ia5150a Firmware
Before 1.5
Running on/withPlatform Versions
Moxa
Nport Ia5150a
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nport Ia5250a Firmware
Before 1.5
Running on/withPlatform Versions
Moxa
Nport Ia5250a
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nport Ia5450a Firmware
Before 2.0
Running on/withPlatform Versions
Moxa
Nport Ia5450a
All versions

References (4)

Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.