PT-2016-3446 · Moxa · Nport 5450Ai-M12 Series+12

Maxim Rupp + 2 · Publicado 2016-12-01 · Atualizado 2026-06-02 · CVE-2016-9361

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions prior to 2.6 Moxa NPort 5130/5150 Series versions prior to 3.6 Moxa NPort 5200 Series versions prior to 2.8 Moxa NPort 5400 Series versions prior to 3.11 Moxa NPort 5600 Series versions prior to 3.7 Moxa NPort 5100A Series & NPort P5150A versions prior to 1.3 Moxa NPort 5200A Series versions prior to 1.3 Moxa NPort 5150AI-M12 Series versions prior to 1.2 Moxa NPort 5250AI-M12 Series versions prior to 1.2 Moxa NPort 5450AI-M12 Series versions prior to 1.2 Moxa NPort 5600-8-DT Series versions prior to 2.4 Moxa NPort 5600-8-DTL Series versions prior to 2.4 Moxa NPort 6x50 Series versions prior to 1.13.11 Moxa NPort IA5450A versions prior to v1.4

Description The issue is related to the authentication procedure in Moxa NPort devices, allowing administration passwords to be retried without authenticating. This can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Moxa NPort 5110 versions prior to 2.6, update to version 2.6 or later. For Moxa NPort 5130/5150 Series versions prior to 3.6, update to version 3.6 or later. For Moxa NPort 5200 Series versions prior to 2.8, update to version 2.8 or later. For Moxa NPort 5400 Series versions prior to 3.11, update to version 3.11 or later. For Moxa NPort 5600 Series versions prior to 3.7, update to version 3.7 or later. For Moxa NPort 5100A Series & NPort P5150A versions prior to 1.3, update to version 1.3 or later. For Moxa NPort 5200A Series versions prior to 1.3, update to version 1.3 or later. For Moxa NPort 5150AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5250AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5450AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5600-8-DT Series versions prior to 2.4, update to version 2.4 or later. For Moxa NPort 5600-8-DTL Series versions prior to 2.4, update to version 2.4 or later. For Moxa NPort 6x50 Series versions prior to 1.13.11, update to version 1.13.11 or later. For Moxa NPort IA5450A versions prior to v1.4, update to version v1.4 or later.

Exploit

Correção

Improper Restriction of Excessive Authentication Attempts

Improper Authentication

Enumeração de Fraquezas

CWE-307

CWE-287

Identificadores relacionados

BDU:2023-02362

CVE-2016-9361

Produtos afetados

Nport 5100A Series

Nport 5110

Nport 5130/5150 Series

Nport 5150Ai-M12 Series

Nport 5200 Series

Nport 5250Ai-M12 Series

Nport 5400 Series

Nport 5450Ai-M12 Series

Nport 5600 Series

Nport 5600-8-Dt Series

Nport 6X50 Series

Nport Ia5450A

Nport P5150A

Referências · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/scada/moxa_discover.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/scada/moxa_credentials_recovery.rb · Exploit
• https://bdu.fstec.ru/vul/2023-02362 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02 · Nota
• moxahttps://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/admin/scada/moxa_credentials_recovery.md · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9361 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-9361 · Aviso do Fabricante
• https://t.me/cveNotify/165718 · Publicação no Telegram
• http://securityfocus.com/bid/85965 · Nota