CVE-2020-25190

published 2020-12-23

CVE-2020-25190: The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext.

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
moxa	nport_iaw5000a-i_o	unspecified – Version 2.1	—
moxa	nport_iaw5000a-i_o_firmware	<= 2.1	—

CWE-319