← CVE Intelligence

CVE-2020-25198

MOXA NPort IAW5000A-I/O Series PUBLISHED

Description (CNA)

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies.

Affected (CNA)

Vendor / productVersions
MOXA / NPort IAW5000A-I/Oaffected unspecified through Version 2.1

CWE

CWE-384

References

ADP enrichment

CVE

No English description supplied.