Improper validation of integrity check value in Moxa products - CVE-2023-4929

Vulnerability identifier: #VU81458

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-4929

CWE-ID: CWE-354

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to bypass integrity checks.

The vulnerability exists due to improper validation of integrity check. A remote authenticated administrator can manipulate the firmware and gain control of devices.

NPort 5200 Series
NPort IA5000 Series
NPort IA5450A Series
NPort 5430
NPort IA5150A
NPort 5450
NPort 5410
NPort IA5250A
NPort 5200A Series
NPort 5600-DT Series
NPort IA5000A-I/O Series
NPort 5100A Series
NPort P5150A Series
NPort 5000AI-M12 Series
NPort 5600 Series
NPort IAW5000A-I/O Series
NPort 5110
NPort 5150
NPort 5130

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

• https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability

• Improper validation of integrity check value in Moxa NPort 5000 Series