Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2023-4929

MEDIUM
Published 2023-10-03T13:54:49.293Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2023-4929. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1
6.5
/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Base Score Metrics
Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14
0.000
probability
of exploitation in the wild

There is a 0.0% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25
Exploit Probability
Percentile: 0.115
Higher than 11.5% of all CVEs

Attack Vector Metrics

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED

Impact Metrics

Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Description

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Moxa

NPort 5000AI-M12 Series

Affected Versions:

1.0
Moxa

NPort 5100 Series

Affected Versions:

1.0
Moxa

NPort 5100A Series

Affected Versions:

1.0
Moxa

NPort 5200 Series

Affected Versions:

1.0
Moxa

NPort 5200A Series

Affected Versions:

1.0
Moxa

NPort 5400 Series

Affected Versions:

1.0
Moxa

NPort 5600 Series

Affected Versions:

1.0
Moxa

NPort 5600-DT Series

Affected Versions:

1.0
Moxa

NPort IA5000 Series

Affected Versions:

1.0
Moxa

NPort IA5000A Series

Affected Versions:

1.0
Moxa

NPort IA5000A-I/O Series

Affected Versions:

1.0
Moxa

NPort IAW5000A-I/O Series

Affected Versions:

1.0
Moxa

NPort P5150A Series

Affected Versions:

1.0
moxa

nport_5100ai_m12

Affected Versions:

1.0
moxa

nport_5100

Affected Versions:

1.0
moxa

nport_5100a

Affected Versions:

1.0
moxa

nport_5200_series_firmware

Affected Versions:

1.0
moxa

nport_5200a_series_firmware

Affected Versions:

1.0
moxa

nport_5600_series_firmware

Affected Versions:

1.0
moxa

nport_5600_dt

Affected Versions:

1.0
moxa

nport_ia_5000

Affected Versions:

1.0
moxa

nport_ia_5000a

Affected Versions:

1.0
moxa

nport_ia_5000a_io

Affected Versions:

1.0
moxa

nport_iaw_5000a_io

Affected Versions:

1.0
moxa

nport_p5150a

Affected Versions:

1.0

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-38q7-2rwv-hhrw

Advisory Details

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-4929
WEB https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability

Advisory provided by GitHub Security Advisory Database. Published: October 3, 2023, Modified: April 4, 2024

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability
Published: 2023-10-03T13:54:49.293Z
Last Modified: 2024-09-23T13:29:04.471Z
Copied to clipboard!