CVE-2023-4929

Katalog CVE

CVSS 8.8 · High EPSS 0,31%

Kerentanan Improper Validation of Integrity Check Value pada moxa nport 5150ai-m12-ct-t firmware, moxa nport 5250ai-m12-ct-t firmware +56 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Rincian

Terbit di NVD

3 Oktober 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-354: Improper Validation of Integrity Check Value

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 22,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 128 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-impro... advisory vendor