PT-2023-1664 · Moxa · Nport Windows Driver Manager+1

Published 2023-03-14 · Updated 2023-03-14 · CVE-2022-43993

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NPort 6000 (affected versions not specified) NPort Windows Driver Manager (affected versions not specified)

Description The issue is related to errors in the certificate authentication procedure, which can be exploited by a remote attacker to perform a "man-in-the-middle" attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2023-01224

CVE-2022-43993

Affected Products

Nport 6000

Nport Windows Driver Manager

References · 2

• https://bdu.fstec.ru/vul/2023-01224 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/nport-6000-series-and-utility-improper-certificate-validation-vulnerabilities · Note