CVE-2020-25194

published 2020-12-23

CVE-2020-25194: The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
moxa	nport_iaw5000a-i_o	unspecified – Version 2.1	—
moxa	nport_iaw5000a-i_o_firmware	<= 2.1	—

CWE-269