PT-2017-14531 · Moxa · Nport 5110+2

Publicado 2017-11-16 · Atualizado 2019-10-09 · CVE-2017-16719

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions 2.2 through 2.7 Moxa NPort 5130 versions prior to 3.7 Moxa NPort 5150 versions prior to 3.7

Description An Injection issue was discovered, allowing an attacker to inject packets that could potentially disrupt the availability of the device.

Recommendations For Moxa NPort 5110 versions 2.2 through 2.7, update to a version that addresses the injection issue. For Moxa NPort 5130 versions prior to 3.7, update to version 3.7 or later. For Moxa NPort 5150 versions prior to 3.7, update to version 3.7 or later.

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2017-16719

Produtos afetados

Nport 5110

Nport 5130

Nport 5150

Referências · 4

• https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-16719 · Nota de Segurança
• http://securityfocus.com/bid/101885 · Nota
• https://osv.dev/vulnerability/CVE-2017-16719 · Aviso do Fabricante