CVE-2016-9366
published 2017-02-13CVE-2016-9366: An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort…
PriorityP355critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.40%
82.1th percentile
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. An attacker can freely use brute force to determine parameters needed to bypass authentication.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| moxa | nport_5100_series_firmware | <= 2.5 | — |
| moxa | nport_5100_series_firmware | <= 3.5 | — |
| moxa | nport_5100a_series_firmware | <= 1.2 | — |
| moxa | nport_5200_series_firmware | <= 2.7 | — |
| moxa | nport_5200a_series_firmware | <= 1.2 | — |
| moxa | nport_5400_series_firmware | <= 3.10 | — |
| moxa | nport_5600-8-dtl_series_firmware | <= 2.3 | — |
| moxa | nport_5600_series_firmware | <= 3.6 | — |
| moxa | nport_5x50a1-m12_series_firmware | <= 1.1 | — |
| moxa | nport_6100_series_firmware | <= 1.13 | — |
| moxa | nport_p5150a_series_firmware | <= 1.2 | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Moxa NPort access control (BID-85965 / ID 800798)
vuldb·2026-06-03·CVSS 9.8
CVE-2016-9366 [CRITICAL] Moxa NPort access control (BID-85965 / ID 800798)
A vulnerability labeled as critical has been found in Moxa NPort. This affects an unknown function. The manipulation results in improper access controls.
This vulnerability was named CVE-2016-9366. The attack may be performed from remote. There is no available exploit.
The affected component should be upgraded.
GHSA
GHSA-r4qc-5j5j-254j: An issue was discovered in Moxa NPort 5110 versions prior to 2
ghsa_unreviewed·2022-05-17
CVE-2016-9366 [CRITICAL] GHSA-r4qc-5j5j-254j: An issue was discovered in Moxa NPort 5110 versions prior to 2
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. An attacker can freely use brute force to determine parameters needed to bypass authentication.
CISA ICS
Moxa NPort Device Vulnerabilities (Update A)
cisa_ics·2016-12-01
Moxa NPort Device Vulnerabilities (Update A)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Moxa NPort Device Vulnerabilities (Update A)
Last RevisedMarch 21, 2017
Alert CodeICSA-16-336-02A
## OVERVIEW
This updated advisory is a follow-up to the original advisory titled ICSA-16-336-02 Moxa NPort Device Vulnerabilities that was published December 1, 2016, on the NCCIC/ICS-CERT web site.
Security researchers Reid Wightman of RevICS Security, Mikael Vingaard, and Maxim Rupp have identified vulnerabilities in Moxa’s NPort serial device servers. Moxa has produced new firmware versions to mitigate these vulnerabilities.
These vulnerabilities could be exploited remotely.
#
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-02-13
Published