Moxa Nport Iaw5000A-I O Series Firmware vulnerabilities
4 known vulnerabilities affecting moxa/nport_iaw5000a-i_o_series_firmware.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH2
Vulnerabilities
Page 1 of 1
CVE-2021-32974P2CRITICALCVSS 9.8≥ unspecified, ≤ 2.22022-04-01
CVE-2021-32974 [CRITICAL] CWE-20 CVE-2021-32974: Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware vers
Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands.
nvd
CVE-2021-32976P3CRITICALCVSS 9.8≥ unspecified, ≤ 2.22022-04-01
CVE-2021-32976 [CRITICAL] CWE-121 CVE-2021-32976: Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version
Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code.
nvd
CVE-2021-32968P3HIGHCVSS 7.5≥ unspecified, ≤ 2.22022-04-01
CVE-2021-32968 [HIGH] CWE-120 CVE-2021-32968: Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2
Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may allow a remote attacker to cause a denial-of-service condition.
nvd
CVE-2021-32970P3HIGHCVSS 7.5≥ unspecified, ≤ 2.22022-04-01
CVE-2021-32970 [HIGH] CWE-20 CVE-2021-32970: Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series f
Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions.
nvd