CVE-2023-4204
Assigner: Moxa
Published: 2023-08-16T15:12:01.169Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: NPort IAW5000A-I/O Series
vendor: Moxa
versions: lessThanOrEqual: 2.2
status: affected
version: 1.0
versionType: custom
descriptions: supportingMedia: base64: no
type: text/html
value: <p>NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate firmware manipulation.</p>
value: NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate firmware manipulation.


impacts: capecId: CAPEC-191
descriptions: value: CAPEC-191 Read Sensitive Strings Within an Executable
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-798
description: CWE-798 Use of Hard-coded Credentials
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: Moxa has developed appropriate solution to address the vulnerability. The solution for affected products is shown below: <br><br><ul><li>NPort IAW5000A-I/O Series:&nbsp;Please contact Moxa Technical Support for the security patch.</li></ul>
value: Moxa has developed appropriate solution to address the vulnerability. The solution for affected products is shown below: 

  *  NPort IAW5000A-I/O Series: Please contact Moxa Technical Support for the security patch.



source: discovery: INTERNAL
title: NPort IAW5000A-I/O Series Hardcoded Credential Vulnerability
x_generator: engine: Vulnogram 0.1.0-dev