PT-2020-3050 · Moxa · Moxa Nport 5150A

Maayan Fishelov · Published 2020-05-01 · Updated 2022-04-26 · CVE-2020-12117

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moxa NPort 5150A versions 1.5 and earlier

Description The issue allows attackers to obtain sensitive configuration values via a crafted packet to UDP port 4800. This is related to the Moxa Service, which is an unauthenticated service that runs upon a first-time installation but can be disabled without ill effect. The vulnerability is associated with security mechanism shortcomings, potentially allowing a remote attacker to gain unauthorized access to protected information.

Recommendations For Moxa NPort 5150A versions 1.5 and earlier, consider disabling the Moxa Service to minimize the risk of exploitation, as it can be disabled without ill effect.

Fix

Information Disclosure

Missing Authentication

Weakness Enumeration

CWE-200

CWE-306

Related Identifiers

BDU:2020-03340

CVE-2020-12117

Affected Products

Moxa Nport 5150A

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-12117 · Security Note
• https://moxa.com/en/support/support/security-advisory/nport-5100a-series-serial-device-servers-vulnerability · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03340 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12117 · Vendor Advisory
• https://blog.scadafence.com/technical-blog-cve-2020-12117-industrial-iot-insecure-default-configurations · Note
• https://t.me/cvenotify/3491 · Telegram Post