What is CVE-2023-5627?

CVE-2023-5627 is a high-severity vulnerability in Moxa Nport 6000 Series, classified under Storing Passwords in a Recoverable Format. CVSS score: 7.5/10. Published 2023-11-01.

How severe is CVE-2023-5627?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Moxa Nport 6000 Series

CVE-2023-5627

A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.

EPSS: 0.003 (23.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Moxa Nport 6000 Series — versions 1.0
Moxa Nport_6150
Moxa Nport_6150_firmware
Moxa Nport_6150-t
Moxa Nport_6150-t_firmware
Moxa Nport_6250
Moxa Nport_6250_firmware
Moxa Nport_6250-m-sc
Moxa Nport_6250-m-sc_firmware
Moxa Nport_6250-m-sc-t

Weakness classification (CWE)

CWE-257 — Storing Passwords in a Recoverable Format
CWE-303 — Incorrect Implementation of Authentication Algorithm
CWE-327 — Use of a Broken or Risky Cryptographic Algorithm
CWE-287 — Improper Authentication

References

psirt@moxa.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-5627?: CVE-2023-5627 is a high-severity vulnerability in Moxa Nport 6000 Series, classified under Storing Passwords in a Recoverable Format. CVSS score: 7.5/10. Published 2023-11-01.
How severe is CVE-2023-5627?: High severity. CVSS v3 base score is 7.5 out of 10.