CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2023-5627
High (7.5) in moxa. EPSS 0.3% chance of exploitation in the next 30 days.
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-287, CWE-327, CWE-257, CWE-303
- Published
- Modified
- Record from
- the NVD, synced
Affected
- moxa:nport_6150-t_firmware
- moxa:nport_6150_firmware
- moxa:nport_6250-m-sc-t_firmware
- moxa:nport_6250-m-sc_firmware
- moxa:nport_6250-s-sc-t_firmware
- moxa:nport_6250-s-sc_firmware
- moxa:nport_6250-t_firmware
- moxa:nport_6250_firmware
- moxa:nport_6450-t_firmware
- moxa:nport_6450_firmware
- moxa:nport_6610-16-48v_firmware
- moxa:nport_6610-16_firmware
- moxa:nport_6610-32-48v_firmware
- moxa:nport_6610-32_firmware
- moxa:nport_6610-8-48v_firmware
- moxa:nport_6610-8_firmware
- moxa:nport_6650-16-48v_firmware
- moxa:nport_6650-16-hv-t_firmware
- moxa:nport_6650-16-t_firmware
- moxa:nport_6650-16_firmware
- moxa:nport_6650-32-48v_firmware
- moxa:nport_6650-32-hv-t_firmware
- moxa:nport_6650-32_firmware
- moxa:nport_6650-8-48v_firmware
- moxa:nport_6650-8-hv-t_firmware
- moxa:nport_6650-8-t_firmware
- moxa:nport_6650-8_firmware
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerability
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerability