CVE-2020-27149

3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.3%
top 43.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Moxa Nport Ia5150a FirmwareMoxa Nport Ia5250a FirmwareMoxa Nport Ia5450a Firmware
Timeline
PublishedMay 14
Latest updateMay 24

Description

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5nport_ia5000a_series_with_web_console_enabledAll versions before 1.5 for NPort IA5150A/IA5250A Series. All version before 2.0 for NPort 5450 Series

🔴Vulnerability Details

2
GHSA
GHSA-6q59-xh2r-73jw: By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1↗2022-05-24
▶
CVEList
CVE-2020-27149: By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1↗2021-05-14
▶
CVE-2020-27149 (MEDIUM CVSS 6.5) | By exploiting a vulnerability in NP | cvebase.io