Vulnerability in Moxa Nport Ia5150a
CVE-2020-27185
Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, device configuration, and other sensitive data transmitted over Moxa Service.
EPSS: 0.007 (50.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Moxa Nport_ia5150a
- Moxa Nport_ia5150a_firmware
- Moxa Nport_ia5250a
- Moxa Nport_ia5250a_firmware
- Moxa Nport_ia5450a
- Moxa Nport_ia5450a_firmware
- N/a Nport Ia5000a Series With Moxa Service Enabled — versions All versions
Weakness classification (CWE)
References
- vulnerability@kaspersky.com (x_refsource_MISC, Vendor Advisory)
- vulnerability@kaspersky.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-27185?
- CVE-2020-27185 is a high-severity vulnerability in Moxa Nport Ia5150a, classified under Cleartext Transmission of Sensitive Information. CVSS score: 7.5/10. Published 2021-05-14.
- How severe is CVE-2020-27185?
- High severity. CVSS v3 base score is 7.5 out of 10.