← All CVEs

CVE-2016-9361

critical · 9.8

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. Administration passwords can be retried without authenticating.

9.8
CVSS
19.9%
EPSS (exploit prob.)
97th
EPSS percentile
2017-02-13
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287CWE-307

Affected products

VendorProductAffected versions
moxanport_5100_series_firmware<= 2.5
moxanport_5110all versions
moxanport_5100_series_firmware<= 3.5
moxanport_5130all versions
moxanport_5150all versions
moxanport_5200_series_firmware<= 2.7
moxanport_5210all versions
moxanport_5230all versions
moxanport_5232all versions
moxanport_5232iall versions
moxanport_5400_series_firmware<= 3.10
moxanport_5410all versions
moxanport_5430all versions
moxanport_5430iall versions
moxanport_5450all versions
moxanport_5450-tall versions
moxanport_5450iall versions
moxanport_5450i-tall versions
moxanport_5600_series_firmware<= 3.6
moxanport_5610all versions
moxanport_5630all versions
moxanport_5650all versions
moxanport_5100a_series_firmware<= 1.2
moxanport_5110aall versions
moxanport_5130aall versions
moxanport_5150aall versions
moxanport_p5150a_series_firmware<= 1.2
moxanport_p5110aall versions
moxanport_5200a_series_firmware<= 1.2
moxanport_5210aall versions
moxanport_5230aall versions
moxanport_5250aall versions
moxanport_5x50a1-m12_series_firmware<= 1.1
moxanport_5150a1-m12all versions
moxanport_5150a1-m12-ctall versions
moxanport_5150a1-m12-ct-tall versions
moxanport_5150a1-m12-tall versions
moxanport_5250a1-m12all versions
moxanport_5250a1-m12-ctall versions
moxanport_5250a1-m12-ct-tall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-9361