PT-2023-6739 · Moxa · Nport 6000 Series

Nathan Nye + 1 · Publicado 2023-11-01 · Atualizado 2023-11-09 · CVE-2023-5627

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NPort 6000 Series (affected versions not specified)

Description A vulnerability has been identified in the authentication mechanism of the NPort 6000 Series, arising from the incorrect implementation of sensitive information protection. This could potentially allow malicious users to gain unauthorized access to the web service. The issue is related to the incorrect implementation of the authentication algorithm, which may enable a remote attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Improper Authentication

Enumeração de Fraquezas

CWE-257

CWE-327

CWE-303

CWE-287

Identificadores relacionados

BDU:2023-07516

CVE-2023-5627

Produtos afetados

Nport 6000 Series

Referências · 7

• https://twitter.com/NUYTSTECH/status/1720189321293255025 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2023-07516 · Nota de Segurança
• https://t.me/cibsecurity/73343 · Publicação no Telegram
• https://moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerability · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1719735109039841605 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-5627 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-5627 · Aviso do Fabricante