GCVE - cpe:2.3:o:moxa:nport_5100a_series_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:moxa:nport_5100a_series_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Moxa (`98e7f712-aaf6-5b76-a35e-6cb93ba6791f`)
Product	Nport 5100A Series Firmware (`4035e6df-f4ed-5f04-ade0-177b403856c8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-3576`	vulnerable	2026-06-08 06:43:50.347944	NPort 5100A Series Store XSS Vulnerability HIGH (8.3) The NPort 5100A Series firmware version v1.6 and prior versions are affected by web server XSS vulnerability. The vulnerability is caused by not correctly neutralizing user-controllable input before placing it in output. Malicious users may use the vulnerability to get sensitive information and escalate privileges. Published: 2024-05-06T12:04:47.826Z Updated: 2024-08-01T20:12:07.894Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/mpsa-246328-nport-5100a-series-store-xss-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9371`	vulnerable	2026-06-08 05:08:23.479173	Details available An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. User-controlled input is not neutralized before being output to web page (CROSS-SITE SCRIPTING). Published: 2017-02-13T21:00:00.000Z Updated: 2024-08-06T02:50:37.054Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02 http://www.securityfocus.com/bid/85965	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9369`	vulnerable	2026-06-08 05:08:23.477353	Details available An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. Firmware can be updated over the network without authentication, which may allow remote code execution. Published: 2017-02-13T21:00:00.000Z Updated: 2026-06-02T19:30:28.060Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02 http://www.securityfocus.com/bid/85965	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9367`	vulnerable	2026-06-08 05:08:23.459651	Details available An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. The amount of resources requested by a malicious actor is not restricted, leading to a denial-of-service caused by resource exhaustion. Published: 2017-02-13T21:00:00.000Z Updated: 2026-06-02T19:27:50.517Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02 http://www.securityfocus.com/bid/85965	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9366`	vulnerable	2026-06-08 05:08:23.457840	Details available An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. An attacker can freely use brute force to determine parameters needed to bypass authentication. Published: 2017-02-13T21:00:00.000Z Updated: 2026-06-02T19:26:50.571Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02 http://www.securityfocus.com/bid/85965	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9365`	vulnerable	2026-06-08 05:08:23.456065	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9363`	vulnerable	2026-06-08 05:08:23.446411	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9361`	vulnerable	2026-06-08 05:08:23.435357	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9348`	vulnerable	2026-06-08 05:08:23.355034	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.