cbcvebase.
CVE-2021-32974
published 2022-04-01

CVE-2021-32974: Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute…

critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands.

Affected

5 ranges
VendorProductVersion rangeFixed in
moxanport_iaw5000a-i_o_series_firmwareunspecified – 2.2
moxanport_iaw5150a-12i_o_firmware<= 2.2
moxanport_iaw5150a-6i_o_firmware<= 2.2
moxanport_iaw5250a-12i_o_firmware<= 2.2
moxanport_iaw5250a-6i_o_firmware<= 2.2