Main Vulnerability Database Vulnerabilities #VU27429

#VU27429 Information disclosure in NPort 5100A - CVE-2020-12117

Published: April 29, 2020

Vulnerability identifier: #VU27429

Vulnerability risk: Medium

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2020-12117

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
NPort 5100A

Software vendor:
Moxa

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to and error in NPort 5100A Series Serial Device Server. A remote attacker can gain unauthorized access to the serial port configurations of the device.

Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links

https://www.moxa.com/en/support/support/security-advisory/nport-5100a-series-serial-device-servers-vulnerability