Description
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Published: 2023-10-03
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Due to design restrictions, we could not fix this vulnerability in NPort 5000 Series. We suggest users follow the instructions in the hardening guide https://www.moxa.com/getmedia/67b5e549-a125-4a6a-b99b-23017c75cfc1/moxa-the-security-hardening-guide-for-the-nport-5000-series-tech-note-v1.1.pdf in order to mitigate this vulnerability. Additionally, refer to the following mitigation measures to deploy the product in an appropriate product security context. Moxa recommends users follow these CISA recommendations. Users should * Reduce network exposure by ensuring that all control system devices and systems are not accessible from the Internet. * Place control system networks and remote devices behind firewalls, isolating them from business networks. * When remote access is necessary, employ secure methods such as Virtual Private Networks (VPNs). It is important to note that VPNs may have vulnerabilities and should be kept up to date with the latest available version. Remember that the security of a VPN depends on the security of its connected devices.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-54765 All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.
History

Mon, 23 Sep 2024 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Moxa nport 5100
Moxa nport 5100a
Moxa nport 5100ai M12
Moxa nport 5200 Series Firmware
Moxa nport 5200a Series Firmware
Moxa nport 5600 Dt
Moxa nport 5600 Series Firmware
Moxa nport Ia 5000
Moxa nport Ia 5000a
Moxa nport Ia 5000a Io
Moxa nport Iaw 5000a Io
CPEs cpe:2.3:a:moxa:nport_5100:*:*:*:*:*:*:*:*
cpe:2.3:a:moxa:nport_5100ai_m12:*:*:*:*:*:*:*:*
cpe:2.3:a:moxa:nport_5600_dt:*:*:*:*:*:*:*:*
cpe:2.3:a:moxa:nport_5600_series_firmware:*:*:*:*:*:*:*:*
cpe:2.3:a:moxa:nport_ia_5000:*:*:*:*:*:*:*:*
cpe:2.3:a:moxa:nport_ia_5000a:*:*:*:*:*:*:*:*
cpe:2.3:a:moxa:nport_ia_5000a_io:*:*:*:*:*:*:*:*
cpe:2.3:a:moxa:nport_iaw_5000a_io:*:*:*:*:*:*:*:*
cpe:2.3:a:moxa:nport_p5150a:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:nport_5100a:-:*:*:*:*:*:*:*
cpe:2.3:o:moxa:nport_5200_series_firmware:2.7:*:*:*:*:*:*:*
cpe:2.3:o:moxa:nport_5200a_series_firmware:1.2:*:*:*:*:*:*:*
Vendors & Products Moxa nport 5100
Moxa nport 5100a
Moxa nport 5100ai M12
Moxa nport 5200 Series Firmware
Moxa nport 5200a Series Firmware
Moxa nport 5600 Dt
Moxa nport 5600 Series Firmware
Moxa nport Ia 5000
Moxa nport Ia 5000a
Moxa nport Ia 5000a Io
Moxa nport Iaw 5000a Io
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Moxa Nport 5100 Nport 5100a Nport 5100ai M12 Nport 5110 Nport 5110-t Nport 5110-t Firmware Nport 5110 Firmware Nport 5110a Nport 5110a-t Nport 5110a-t Firmware Nport 5110a Firmware Nport 5130 Nport 5130 Firmware Nport 5130a Nport 5130a-t Nport 5130a-t Firmware Nport 5130a Firmware Nport 5150 Nport 5150 Firmware Nport 5150a Nport 5150a-t Nport 5150a-t Firmware Nport 5150a Firmware Nport 5150ai-m12 Nport 5150ai-m12-ct Nport 5150ai-m12-ct-t Nport 5150ai-m12-ct-t Firmware Nport 5150ai-m12-ct Firmware Nport 5150ai-m12-t Nport 5150ai-m12-t Firmware Nport 5150ai-m12 Firmware Nport 5200 Series Firmware Nport 5200a Series Firmware Nport 5210 Nport 5210-t Nport 5210-t Firmware Nport 5210 Firmware Nport 5210a Nport 5210a-t Nport 5210a-t Firmware Nport 5210a Firmware Nport 5230 Nport 5230-t Nport 5230-t Firmware Nport 5230 Firmware Nport 5230a Nport 5230a-t Nport 5230a-t Firmware Nport 5230a Firmware Nport 5232 Nport 5232-t Nport 5232-t Firmware Nport 5232 Firmware Nport 5232i Nport 5232i-t Nport 5232i-t Firmware Nport 5232i Firmware Nport 5250a Nport 5250a-t Nport 5250a-t Firmware Nport 5250a Firmware Nport 5250ai-m12 Nport 5250ai-m12-ct Nport 5250ai-m12-ct-t Nport 5250ai-m12-ct-t Firmware Nport 5250ai-m12-ct Firmware Nport 5250ai-m12-t Nport 5250ai-m12-t Firmware Nport 5250ai-m12 Firmware Nport 5410 Nport 5410 Firmware Nport 5430 Nport 5430 Firmware Nport 5450 Nport 5450-t Nport 5450-t Firmware Nport 5450 Firmware Nport 5450ai-m12 Nport 5450ai-m12-ct Nport 5450ai-m12-ct-t Nport 5450ai-m12-ct-t Firmware Nport 5450ai-m12-ct Firmware Nport 5450ai-m12-t Nport 5450ai-m12-t Firmware Nport 5450ai-m12 Firmware Nport 5450i Nport 5450i-t Nport 5450i-t Firmware Nport 5450i Firmware Nport 5600 Dt Nport 5600 Series Firmware Nport 5610-16 Nport 5610-16-48v Nport 5610-16-48v Firmware Nport 5610-16 Firmware Nport 5610-8 Nport 5610-8-48v Nport 5610-8-48v Firmware Nport 5610-8-dt Nport 5610-8-dt-j Nport 5610-8-dt-j Firmware Nport 5610-8-dt-t Nport 5610-8-dt-t Firmware Nport 5610-8-dt Firmware Nport 5610-8 Firmware Nport 5630-16 Nport 5630-16 Firmware Nport 5630-8 Nport 5630-8 Firmware Nport 5650-16 Nport 5650-16-hv-t Nport 5650-16-hv-t Firmware Nport 5650-16-m-sc Nport 5650-16-m-sc Firmware Nport 5650-16-s-sc Nport 5650-16-s-sc Firmware Nport 5650-16-t Nport 5650-16-t Firmware Nport 5650-16 Firmware Nport 5650-8 Nport 5650-8-dt Nport 5650-8-dt-j Nport 5650-8-dt-j Firmware Nport 5650-8-dt-t Nport 5650-8-dt-t Firmware Nport 5650-8-dt Firmware Nport 5650-8-hv-t Nport 5650-8-hv-t Firmware Nport 5650-8-m-sc Nport 5650-8-m-sc Firmware Nport 5650-8-s-sc Nport 5650-8-s-sc Firmware Nport 5650-8-t Nport 5650-8-t Firmware Nport 5650-8 Firmware Nport 5650i-8-dt Nport 5650i-8-dt-t Nport 5650i-8-dt-t Firmware Nport 5650i-8-dt Firmware Nport Ia-5150 Nport Ia-5150-m-sc Nport Ia-5150-m-sc-t Nport Ia-5150-m-sc-t Firmware Nport Ia-5150-m-sc Firmware Nport Ia-5150-m-st Nport Ia-5150-m-st-t Nport Ia-5150-m-st-t Firmware Nport Ia-5150-m-st Firmware Nport Ia-5150-s-sc Nport Ia-5150-s-sc-t Nport Ia-5150-s-sc-t Firmware Nport Ia-5150-s-sc Firmware Nport Ia-5150-t Nport Ia-5150-t Firmware Nport Ia-5150 Firmware Nport Ia-5150i Nport Ia-5150i-m-sc Nport Ia-5150i-m-sc-t Nport Ia-5150i-m-sc-t Firmware Nport Ia-5150i-m-sc Firmware Nport Ia-5150i-s-sc Nport Ia-5150i-s-sc-t Nport Ia-5150i-s-sc-t Firmware Nport Ia-5150i-s-sc Firmware Nport Ia-5150i-t Nport Ia-5150i-t Firmware Nport Ia-5150i Firmware Nport Ia-5250 Nport Ia-5250-t Nport Ia-5250-t Firmware Nport Ia-5250 Firmware Nport Ia-5250i Nport Ia-5250i-t Nport Ia-5250i-t Firmware Nport Ia-5250i Firmware Nport Ia5000a-i\/o Nport Ia5000a-i\/o Firmware Nport Ia5150a Nport Ia5150a-iex Nport Ia5150a-iex Firmware Nport Ia5150a-t Nport Ia5150a-t-iex Nport Ia5150a-t-iex Firmware Nport Ia5150a-t Firmware Nport Ia5150a Firmware Nport Ia5150ai Nport Ia5150ai-iex Nport Ia5150ai-iex Firmware Nport Ia5150ai-t Nport Ia5150ai-t-iex Nport Ia5150ai-t-iex Firmware Nport Ia5150ai-t Firmware Nport Ia5150ai Firmware Nport Ia5250a Nport Ia5250a-iex Nport Ia5250a-iex Firmware Nport Ia5250a-t Nport Ia5250a-t-iex Nport Ia5250a-t-iex Firmware Nport Ia5250a-t Firmware Nport Ia5250a Firmware Nport Ia5250ai Nport Ia5250ai-iex Nport Ia5250ai-iex Firmware Nport Ia5250ai-t Nport Ia5250ai-t-iex Nport Ia5250ai-t-iex Firmware Nport Ia5250ai-t Firmware Nport Ia5250ai Firmware Nport Ia5450a Nport Ia5450a-t Nport Ia5450a-t Firmware Nport Ia5450a Firmware Nport Ia5450ai Nport Ia5450ai-t Nport Ia5450ai-t Firmware Nport Ia5450ai Firmware Nport Ia 5000 Nport Ia 5000a Nport Ia 5000a Io Nport Iaw5000a-i\/o Nport Iaw5000a-i\/o Firmware Nport Iaw 5000a Io Nport P5150a Nport P5150a-t Nport P5150a-t Firmware Nport P5150a Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: Moxa

Published:

Updated: 2024-09-23T13:29:04.471Z

Reserved: 2023-09-13T01:12:13.466Z

Link: CVE-2023-4929

cve-icon Vulnrichment

Updated: 2024-08-02T07:44:52.628Z

cve-icon NVD

Status : Modified

Published: 2023-10-03T14:15:11.307

Modified: 2024-11-21T08:36:17.250

Link: CVE-2023-4929

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses