PT-2017-10090 · Moxa · Nport 5450Ai-M12 Series+12

Published 2017-02-13 · Updated 2026-06-02 · CVE-2016-9366

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions prior to 2.6 Moxa NPort 5130/5150 Series versions prior to 3.6 Moxa NPort 5200 Series versions prior to 2.8 Moxa NPort 5400 Series versions prior to 3.11 Moxa NPort 5600 Series versions prior to 3.7 Moxa NPort 5100A Series & NPort P5150A versions prior to 1.3 Moxa NPort 5200A Series versions prior to 1.3 Moxa NPort 5150AI-M12 Series versions prior to 1.2 Moxa NPort 5250AI-M12 Series versions prior to 1.2 Moxa NPort 5450AI-M12 Series versions prior to 1.2 Moxa NPort 5600-8-DT Series versions prior to 2.4 Moxa NPort 5600-8-DTL Series versions prior to 2.4 Moxa NPort 6x50 Series versions prior to 1.13.11 Moxa NPort IA5450A versions prior to v1.4

Description An issue was discovered that allows an attacker to use brute force to determine parameters needed to bypass authentication.

Recommendations For Moxa NPort 5110 versions prior to 2.6, update to version 2.6 or later. For Moxa NPort 5130/5150 Series versions prior to 3.6, update to version 3.6 or later. For Moxa NPort 5200 Series versions prior to 2.8, update to version 2.8 or later. For Moxa NPort 5400 Series versions prior to 3.11, update to version 3.11 or later. For Moxa NPort 5600 Series versions prior to 3.7, update to version 3.7 or later. For Moxa NPort 5100A Series & NPort P5150A versions prior to 1.3, update to version 1.3 or later. For Moxa NPort 5200A Series versions prior to 1.3, update to version 1.3 or later. For Moxa NPort 5150AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5250AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5450AI-M12 Series versions prior to 1.2, update to version 1.2 or later. For Moxa NPort 5600-8-DT Series versions prior to 2.4, update to version 2.4 or later. For Moxa NPort 5600-8-DTL Series versions prior to 2.4, update to version 2.4 or later. For Moxa NPort 6x50 Series versions prior to 1.13.11, update to version 1.13.11 or later. For Moxa NPort IA5450A versions prior to v1.4, update to version v1.4 or later.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-264

CWE-307

Related Identifiers

CVE-2016-9366

Affected Products

Nport 5100A Series

Nport 5110

Nport 5130/5150 Series

Nport 5150Ai-M12 Series

Nport 5200 Series

Nport 5250Ai-M12 Series

Nport 5400 Series

Nport 5450Ai-M12 Series

Nport 5600 Series

Nport 5600-8-Dt Series

Nport 6X50 Series

Nport Ia5450A

Nport P5150A

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-9366 · Security Note
• https://osv.dev/vulnerability/CVE-2016-9366 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02 · Note
• http://securityfocus.com/bid/85965 · Note
• https://t.me/cveNotify/165721 · Telegram Post