6.5

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Moxa ≫ Nport Ia5150a Firmware Version < 1.5
   Moxa ≫ Nport Ia5150a Version-
Moxa ≫ Nport Ia5250a Firmware Version < 1.5
   Moxa ≫ Nport Ia5250a Version-
Moxa ≫ Nport Ia5450a Firmware Version < 2.0
   Moxa ≫ Nport Ia5450a Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.69% 0.479
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-018%2C
https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities
Vendor Advisory