PT-2017-14534 · Moxa · Moxa Nport W2250A+1

Publicado 2017-12-22 · Atualizado 2019-10-09 · CVE-2017-16727

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Moxa NPort W2150A versions prior to 1.11 Moxa NPort W2250A versions prior to 1.11

Description A Credentials Management issue allows unauthorized access to the device due to an empty default password. This enables an unauthorized user to compromise the confidentiality and integrity of wireless traffic without needing a password.

Recommendations For Moxa NPort W2150A versions prior to 1.11, update to version 1.11 or later to resolve the issue. For Moxa NPort W2250A versions prior to 1.11, update to version 1.11 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-521

CWE-255

Identificadores relacionados

CVE-2017-16727

Produtos afetados

Moxa Nport W2150A

Moxa Nport W2250A

Referências · 4

• https://ics-cert.us-cert.gov/advisories/ICSA-17-355-01 · Correção
• https://osv.dev/vulnerability/CVE-2017-16727 · Aviso do Fabricante
• http://securityfocus.com/bid/102254 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-16727 · Nota de Segurança