PT-2023-1664 · Moxa · Nport Windows Driver Manager+1

Publicado 2023-03-14 · Atualizado 2023-03-14 · CVE-2022-43993

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NPort 6000 (affected versions not specified) NPort Windows Driver Manager (affected versions not specified)

Description The issue is related to errors in the certificate authentication procedure, which can be exploited by a remote attacker to perform a "man-in-the-middle" attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

BDU:2023-01224

CVE-2022-43993

Produtos afetados

Nport 6000

Nport Windows Driver Manager

Referências · 2

• https://moxa.com/en/support/product-support/security-advisory/nport-6000-series-and-utility-improper-certificate-validation-vulnerabilities · Nota
• https://bdu.fstec.ru/vul/2023-01224 · Nota de Segurança