PT-2016-3218 · Moxa · Nport 5450Ai-M12 Series+12

Published 2016-04-08 · Updated 2026-06-02 · CVE-2016-9369

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions prior to 2.6 Moxa NPort 5130/5150 Series versions prior to 3.6 Moxa NPort 5200 Series versions prior to 2.8 Moxa NPort 5400 Series versions prior to 3.11 Moxa NPort 5600 Series versions prior to 3.7 Moxa NPort 5100A Series & NPort P5150A versions prior to 1.3 Moxa NPort 5200A Series versions prior to 1.3 Moxa NPort 5150AI-M12 Series versions prior to 1.2 Moxa NPort 5250AI-M12 Series versions prior to 1.2 Moxa NPort 5450AI-M12 Series versions prior to 1.2 Moxa NPort 5600-8-DT Series versions prior to 2.4 Moxa NPort 5600-8-DTL Series versions prior to 2.4 Moxa NPort 6x50 Series versions prior to 1.13.11 Moxa NPort IA5450A versions prior to v1.4

Description The issue is related to the insufficient authentication procedure in Moxa NPort devices, which can be exploited by a remote attacker to execute arbitrary code by updating the device's firmware over the network without authentication.

Recommendations For Moxa NPort 5110 version prior to 2.6, update to version 2.6 or later. For Moxa NPort 5130/5150 Series versions prior to 3.6, update to version 3.6 or later. For Moxa NPort 5200 Series versions prior to 2.8, update to version 2.8 or later. For Moxa NPort 5400 Series versions prior to 3.11, update to version 3.11 or later. For Moxa NPort 5600 Series versions prior to 3.7, update to version 3.7 or later. For Moxa NPort 5100A Series & NPort P5150A versions prior to 1.3, update to version 1.3 or later. For Moxa NPort 5200A Series versions prior to 1.3, update to version 1.3 or later. For Moxa NPort 5150AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5250AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5450AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5600-8-DT Series versions prior to 2.4, update to version 2.4 or later. For Moxa NPort 5600-8-DTL Series versions prior to 2.4, update to version 2.4 or later. For Moxa NPort 6x50 Series versions prior to 1.13.11, update to version 1.13.11 or later. For Moxa NPort IA5450A versions prior to v1.4, update to version v1.4 or later.

Fix

RCE

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

BDU:2017-02554

CVE-2016-9369

Affected Products

Nport 5100A Series

Nport 5110

Nport 5130/5150 Series

Nport 5150Ai-M12 Series

Nport 5200 Series

Nport 5250Ai-M12 Series

Nport 5400 Series

Nport 5450Ai-M12 Series

Nport 5600 Series

Nport 5600-8-Dt Series

Nport 6X50 Series

Nport Ia5450A

Nport P5150A

References · 6

• https://bdu.fstec.ru/vul/2017-02554 · Security Note
• https://osv.dev/vulnerability/CVE-2016-9369 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9369 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02 · Note
• http://securityfocus.com/bid/85965 · Note
• https://t.me/cveNotify/165723 · Telegram Post