GCVE - cpe:2.3:o:moxa:nport_ia5450a_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:moxa:nport_ia5450a_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Moxa (`98e7f712-aaf6-5b76-a35e-6cb93ba6791f`)
Product	Nport Ia5450A Firmware (`23aff61a-5beb-5588-aa26-b0cc5f45cedd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-4929`	vulnerable	2026-06-08 06:16:15.088014	NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability MEDIUM (6.5) All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices. Published: 2023-10-03T13:54:49.293Z Updated: 2024-09-23T13:29:04.471Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-27185`	vulnerable	2026-06-08 05:23:52.198011	Details available Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, device configuration, and other sensitive data transmitted over Moxa Service. Published: 2021-05-14T12:06:20.000Z Updated: 2024-08-04T16:11:35.824Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-021%2C	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-27184`	vulnerable	2026-06-08 05:23:52.195862	Details available The NPort IA5000A Series devices use Telnet as one of the network device management services. Telnet does not support the encryption of client-server communications, making it vulnerable to Man-in-the-Middle attacks. Published: 2021-05-14T12:06:15.000Z Updated: 2024-08-04T16:11:35.819Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-020%2C	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-27150`	vulnerable	2026-06-08 05:23:52.150552	Details available In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the system and other sensitive data in the original form if “Pre-shared key” doesn’t set. Published: 2021-05-14T11:13:41.000Z Updated: 2024-08-04T16:11:35.615Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-019%2C	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-27149`	vulnerable	2026-06-08 05:23:52.148384	Details available By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed. Published: 2021-05-14T11:13:37.000Z Updated: 2024-08-04T16:11:35.514Z Open on db.gcve.eu Reference links https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-018%2C https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.