Approved changes feed: RSS · Atom

cpe:2.3:a:moxa:nport_iaw5000a-i/o:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductNport Iaw5000A I/O (235430c9-8f35-5ac8-944f-0534d18b38cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25198 vulnerable 2026-06-08 05:22:36.423568 MOXA NPort IAW5000A-I/O Series
HIGH (8.8)
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies.
Published: 2020-12-23T14:08:23.404Z
Updated: 2024-09-17T00:11:38.801Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25196 vulnerable 2026-06-08 05:22:36.421812 MOXA NPort IAW5000A-I/O Series
CRITICAL (9.8)
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication.
Published: 2020-12-23T14:08:41.583Z
Updated: 2024-09-17T00:37:03.186Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25194 vulnerable 2026-06-08 05:22:36.412351 MOXA NPort IAW5000A-I/O Series
HIGH (8.8)
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges.
Published: 2020-12-23T14:08:17.398Z
Updated: 2024-09-16T18:29:02.424Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25192 vulnerable 2026-06-08 05:22:36.402842 MOXA NPort IAW5000A-I/O Series
MEDIUM (5.3)
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization.
Published: 2020-12-23T14:08:28.438Z
Updated: 2024-09-16T22:41:28.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25190 vulnerable 2026-06-08 05:22:36.398990 MOXA NPort IAW5000A-I/O Series
HIGH (7.5)
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext.
Published: 2020-12-23T14:07:56.166Z
Updated: 2024-09-16T21:08:02.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25153 vulnerable 2026-06-08 05:22:36.051961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.