PT-2017-14531 · Moxa · Nport 5110+2

Published 2017-11-16 · Updated 2019-10-09 · CVE-2017-16719

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions 2.2 through 2.7 Moxa NPort 5130 versions prior to 3.7 Moxa NPort 5150 versions prior to 3.7

Description An Injection issue was discovered, allowing an attacker to inject packets that could potentially disrupt the availability of the device.

Recommendations For Moxa NPort 5110 versions 2.2 through 2.7, update to a version that addresses the injection issue. For Moxa NPort 5130 versions prior to 3.7, update to version 3.7 or later. For Moxa NPort 5150 versions prior to 3.7, update to version 3.7 or later.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2017-16719

Affected Products

Nport 5110

Nport 5130

Nport 5150

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-16719 · Security Note
• https://osv.dev/vulnerability/CVE-2017-16719 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01 · Note
• http://securityfocus.com/bid/101885 · Note