VULNERABILITY INTELLIGENCE

CVE-2023-4929

CVSS score6.5 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2023-10-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Description

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Weakness classification

  • psirt@moxa.com: CWE-354
  • nvd@nist.gov: CWE-354

Primary references