CVE-2023-4929

published 2023-10-03

CVE-2023-4929: All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from…

Priority P3 53 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Affected

141 ranges · showing 25

Vendor	Product	Version range	Fixed in
moxa	nport_5000ai-m12_series	1.0 – 1.5	—
moxa	nport_5100_series	1.0 – 3.10	—
moxa	nport_5100a_series	1.0 – 1.6	—
moxa	nport_5110-t_firmware	<= 2.10	—
moxa	nport_5110_firmware	<= 2.10	—
moxa	nport_5110a-t_firmware	<= 1.6	—
moxa	nport_5110a_firmware	<= 1.6	—
moxa	nport_5130_firmware	<= 3.10	—
moxa	nport_5130a-t_firmware	<= 1.6	—
moxa	nport_5130a_firmware	<= 1.6	—
moxa	nport_5150_firmware	<= 3.10	—
moxa	nport_5150a-t_firmware	<= 1.6	—
moxa	nport_5150a_firmware	<= 1.6	—
moxa	nport_5150ai-m12-ct-t_firmware	<= 1.5	—
moxa	nport_5150ai-m12-ct_firmware	<= 1.5	—
moxa	nport_5150ai-m12-t_firmware	<= 1.5	—
moxa	nport_5150ai-m12_firmware	<= 1.5	—
moxa	nport_5200_series	1.0 – 2.12	—
moxa	nport_5200a_series	1.0 – 1.6	—
moxa	nport_5210-t_firmware	<= 2.12	—
moxa	nport_5210_firmware	<= 2.12	—
moxa	nport_5210a-t_firmware	<= 1.6	—
moxa	nport_5210a_firmware	<= 1.6	—
moxa	nport_5230-t_firmware	<= 2.12	—
moxa	nport_5230_firmware	<= 2.12	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-354