CVE-2021-32970

published 2022-04-01

CVE-2021-32970: Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
moxa	nport_iaw5000a-i_o_series_firmware	unspecified – 2.2	—
moxa	nport_iaw5150a-12i_o_firmware	<= 2.2	—
moxa	nport_iaw5150a-6i_o_firmware	<= 2.2	—
moxa	nport_iaw5250a-12i_o_firmware	<= 2.2	—
moxa	nport_iaw5250a-6i_o_firmware	<= 2.2	—

CWE-20