PT-2017-10089 · Moxa · Nport 5450Ai-M12 Series+12

Publicado 2017-02-13 · Atualizado 2026-06-02 · CVE-2016-9365

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions prior to 2.6 Moxa NPort 5130/5150 Series versions prior to 3.6 Moxa NPort 5200 Series versions prior to 2.8 Moxa NPort 5400 Series versions prior to 3.11 Moxa NPort 5600 Series versions prior to 3.7 Moxa NPort 5100A Series & NPort P5150A versions prior to 1.3 Moxa NPort 5200A Series versions prior to 1.3 Moxa NPort 5150AI-M12 Series versions prior to 1.2 Moxa NPort 5250AI-M12 Series versions prior to 1.2 Moxa NPort 5450AI-M12 Series versions prior to 1.2 Moxa NPort 5600-8-DT Series versions prior to 2.4 Moxa NPort 5600-8-DTL Series versions prior to 2.4 Moxa NPort 6x50 Series versions prior to 1.13.11 Moxa NPort IA5450A versions prior to 1.4

Description The issue is related to CROSS-SITE REQUEST FORGERY, where requests are not verified to be intentionally submitted by the proper user.

Recommendations For Moxa NPort 5110 versions prior to 2.6, update to version 2.6 or later. For Moxa NPort 5130/5150 Series versions prior to 3.6, update to version 3.6 or later. For Moxa NPort 5200 Series versions prior to 2.8, update to version 2.8 or later. For Moxa NPort 5400 Series versions prior to 3.11, update to version 3.11 or later. For Moxa NPort 5600 Series versions prior to 3.7, update to version 3.7 or later. For Moxa NPort 5100A Series & NPort P5150A versions prior to 1.3, update to version 1.3 or later. For Moxa NPort 5200A Series versions prior to 1.3, update to version 1.3 or later. For Moxa NPort 5150AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5250AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5450AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5600-8-DT Series versions prior to 2.4, update to version 2.4 or later. For Moxa NPort 5600-8-DTL Series versions prior to 2.4, update to version 2.4 or later. For Moxa NPort 6x50 Series versions prior to 1.13.11, update to version 1.13.11 or later. For Moxa NPort IA5450A versions prior to 1.4, update to version 1.4 or later.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2016-9365

Produtos afetados

Nport 5100A Series

Nport 5110

Nport 5130/5150 Series

Nport 5150Ai-M12 Series

Nport 5200 Series

Nport 5250Ai-M12 Series

Nport 5400 Series

Nport 5450Ai-M12 Series

Nport 5600 Series

Nport 5600-8-Dt Series

Nport 6X50 Series

Nport Ia5450A

Nport P5150A

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-9365 · Aviso do Fabricante
• https://t.me/cveNotify/165720 · Publicação no Telegram
• https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02 · Nota
• http://securityfocus.com/bid/85965 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9365 · Nota de Segurança