Cleartext transmission of sensitive information in Moxa products - CVE-2020-27184
Published: April 28, 2021 / Updated: May 12, 2021
Vulnerability identifier: #VU52689
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-27184
CWE-ID: CWE-319
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to software uses insecure communication channel to transmit sensitive information. A remote attacker with ability to intercept network traffic can gain access to sensitive data.
Affected software
NPort IA5150A Series
NPort IA5250A Series
NPort IA5450A Series
NPort IA5250A Series
NPort IA5450A Series
How to mitigate CVE-2020-27184
Install updates from vendor's website.
NPort IA5150A Series - update to 1.5
NPort IA5250A Series - update to 1.5
NPort IA5450A Series - update to 2.0
NPort IA5250A Series - update to 1.5
NPort IA5450A Series - update to 2.0