CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-4929
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
- CWE
- CWE-354
- Published
- Modified
- Record from
- the NVD, synced
Affected
- moxa:nport_5110-t_firmware
- moxa:nport_5110_firmware
- moxa:nport_5110a-t_firmware
- moxa:nport_5110a_firmware
- moxa:nport_5130_firmware
- moxa:nport_5130a-t_firmware
- moxa:nport_5130a_firmware
- moxa:nport_5150_firmware
- moxa:nport_5150a-t_firmware
- moxa:nport_5150a_firmware
- moxa:nport_5150ai-m12-ct-t_firmware
- moxa:nport_5150ai-m12-ct_firmware
- moxa:nport_5150ai-m12-t_firmware
- moxa:nport_5150ai-m12_firmware
- moxa:nport_5210-t_firmware
- moxa:nport_5210_firmware
- moxa:nport_5210a-t_firmware
- moxa:nport_5210a_firmware
- moxa:nport_5230-t_firmware
- moxa:nport_5230_firmware
- moxa:nport_5230a-t_firmware
- moxa:nport_5230a_firmware
- moxa:nport_5232-t_firmware
- moxa:nport_5232_firmware
- moxa:nport_5232i-t_firmware
- moxa:nport_5232i_firmware
- moxa:nport_5250a-t_firmware
- moxa:nport_5250a_firmware
- moxa:nport_5250ai-m12-ct-t_firmware
- moxa:nport_5250ai-m12-ct_firmware
- moxa:nport_5250ai-m12-t_firmware
- moxa:nport_5250ai-m12_firmware
- moxa:nport_5410_firmware
- moxa:nport_5430_firmware
- moxa:nport_5450-t_firmware
- moxa:nport_5450_firmware
- moxa:nport_5450ai-m12-ct-t_firmware
- moxa:nport_5450ai-m12-ct_firmware
- moxa:nport_5450ai-m12-t_firmware
- moxa:nport_5450ai-m12_firmware
- moxa:nport_5450i-t_firmware
- moxa:nport_5450i_firmware
- moxa:nport_5610-16-48v_firmware
- moxa:nport_5610-16_firmware
- moxa:nport_5610-8-48v_firmware
- moxa:nport_5610-8-dt-j_firmware
- moxa:nport_5610-8-dt-t_firmware
- moxa:nport_5610-8-dt_firmware
- moxa:nport_5610-8_firmware
- moxa:nport_5630-16_firmware
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability