CVE-2023-4929 — NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

Description (CNA)

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Affected (CNA)

Vendor / product	Versions
Moxa / NPort 5000AI-M12 Series	affected 1.0 through 1.5
Moxa / NPort 5100 Series	affected 1.0 through 3.10
Moxa / NPort 5100A Series	affected 1.0 through 1.6
Moxa / NPort 5200 Series	affected 1.0 through 2.12
Moxa / NPort 5200A Series	affected 1.0 through 1.6
Moxa / NPort 5400 Series	affected 1.0 through 3.14
Moxa / NPort 5600 Series	affected 1.0 through 3.11
Moxa / NPort 5600-DT Series	affected 1.0 through 2.9
Moxa / NPort IA5000 Series	affected 1.0 through 2.1
Moxa / NPort IA5000A Series	affected 1.0 through 2.0
Moxa / NPort IA5000A-I/O Series	affected 1.0 through 2.0
Moxa / NPort IAW5000A-I/O Series	affected 1.0 through 2.2
Moxa / NPort P5150A Series	affected 1.0 through 1.6

CWE

CWE-354

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability

CISA-ADP

No English description supplied.

No references supplied.