PT-2023-6739 · Moxa · Nport 6000 Series

Nathan Nye + 1 · Published 2023-11-01 · Updated 2023-11-09 · CVE-2023-5627

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NPort 6000 Series (affected versions not specified)

Description A vulnerability has been identified in the authentication mechanism of the NPort 6000 Series, arising from the incorrect implementation of sensitive information protection. This could potentially allow malicious users to gain unauthorized access to the web service. The issue is related to the incorrect implementation of the authentication algorithm, which may enable a remote attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Improper Authentication

Weakness Enumeration

CWE-257

CWE-327

CWE-303

CWE-287

Related Identifiers

BDU:2023-07516

CVE-2023-5627

Affected Products

Nport 6000 Series

References · 7

• https://bdu.fstec.ru/vul/2023-07516 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5627 · Security Note
• https://osv.dev/vulnerability/CVE-2023-5627 · Vendor Advisory
• https://twitter.com/NUYTSTECH/status/1720189321293255025 · Twitter Post
• https://t.me/cibsecurity/73343 · Telegram Post
• https://twitter.com/CVEnew/status/1719735109039841605 · Twitter Post