CVE-2016-9365
published 2017-02-13CVE-2016-9365: An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort…
PriorityP339high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.64%
46.5th percentile
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. Requests are not verified to be intentionally submitted by the proper user (CROSS-SITE REQUEST FORGERY).
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| moxa | nport_5100_series_firmware | <= 2.5 | — |
| moxa | nport_5100_series_firmware | <= 3.5 | — |
| moxa | nport_5100a_series_firmware | <= 1.2 | — |
| moxa | nport_5200_series_firmware | <= 2.7 | — |
| moxa | nport_5200a_series_firmware | <= 1.2 | — |
| moxa | nport_5400_series_firmware | <= 3.10 | — |
| moxa | nport_5600-8-dtl_series_firmware | <= 2.3 | — |
| moxa | nport_5600_series_firmware | <= 3.6 | — |
| moxa | nport_5x50a1-m12_series_firmware | <= 1.1 | — |
| moxa | nport_6100_series_firmware | <= 1.13 | — |
| moxa | nport_p5150a_series_firmware | <= 1.2 | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Moxa NPort cross-site request forgery (BID-85965 / ID 800798)
vuldb·2026-06-03·CVSS 8.8
CVE-2016-9365 [HIGH] Moxa NPort cross-site request forgery (BID-85965 / ID 800798)
A vulnerability identified as problematic has been detected in Moxa NPort. The impacted element is an unknown function. The manipulation leads to cross-site request forgery.
This vulnerability is uniquely identified as CVE-2016-9365. The attack is possible to be carried out remotely. No exploit exists.
You should upgrade the affected component.
GHSA
GHSA-vpcf-prrv-rxm4: An issue was discovered in Moxa NPort 5110 versions prior to 2
ghsa_unreviewed·2022-05-17
CVE-2016-9365 [HIGH] CWE-352 GHSA-vpcf-prrv-rxm4: An issue was discovered in Moxa NPort 5110 versions prior to 2
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. Requests are not verified to be intentionally submitted by the proper user (CROSS-SITE REQUEST FORGERY).
CISA ICS
Moxa NPort Device Vulnerabilities (Update A)
cisa_ics·2016-12-01
Moxa NPort Device Vulnerabilities (Update A)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Moxa NPort Device Vulnerabilities (Update A)
Last RevisedMarch 21, 2017
Alert CodeICSA-16-336-02A
## OVERVIEW
This updated advisory is a follow-up to the original advisory titled ICSA-16-336-02 Moxa NPort Device Vulnerabilities that was published December 1, 2016, on the NCCIC/ICS-CERT web site.
Security researchers Reid Wightman of RevICS Security, Mikael Vingaard, and Maxim Rupp have identified vulnerabilities in Moxa’s NPort serial device servers. Moxa has produced new firmware versions to mitigate these vulnerabilities.
These vulnerabilities could be exploited remotely.
#
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-02-13
Published