PT-2021-3066 · Moxa · Nport Ia5150A/Ia5250A Series

Alexander Nochvay · Published 2021-04-28 · Updated 2021-05-21 · CVE-2020-27149

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions NPort IA5150A/IA5250A Series versions prior to 1.5

Description The issue is related to inadequate access control in the NPort IA5150A/IA5250A Series, allowing a user with "Read Only" privilege level to send requests via the web console to change the device's configuration. This can be exploited by a remote attacker to bypass existing security restrictions and elevate their privileges.

Recommendations For versions prior to 1.5, update to version 1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the web console to prevent unauthorized configuration changes.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2021-02678

CVE-2020-27149

Affected Products

Nport Ia5150A/Ia5250A Series

References · 6

• https://moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02678 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-27149 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27149 · Vendor Advisory
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-018%2C · Note
• https://cybersecurity-help.cz/vdb/SB2021042809 · Note