9.1

CVE-2017-16727

A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The default password is empty on the device. An unauthorized user can access the device without a password. An unauthorized user has the ability to completely compromise the confidentiality and integrity of the wireless traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Moxa ≫ Nport W2150a Firmware Version < 1.11
   Moxa ≫ Nport W2150a Version-
Moxa ≫ Nport W2250a Firmware Version < 1.11
   Moxa ≫ Nport W2250a Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.429
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
CWE-521 Weak Password Requirements

The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

http://www.securityfocus.com/bid/102254
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-355-01
Patch
Third Party Advisory
US Government Resource