CVE-2020-27185

published 2021-05-14

CVE-2020-27185: Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, device configuration, and other sensitive data transmitted over Moxa Service.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
moxa	nport_ia5150a_firmware	<= 1.4	—
moxa	nport_ia5250a_firmware	<= 1.4	—
moxa	nport_ia5450a_firmware	<= 1.7	—

CWE-319