Login
Sign-up
AboutIT4A
SHOPOT Products
SUPPLYSolutions
HOSTSolutions
PROTECTSolutions
CONNECTServices
UsefulRESOURCES
CONTACTIT4A

NPort IA5000A Series Serial Device Servers Vulnerabilities

Published: April 28, 2021

This Alert Is From MOXA

As Industrial IoT (IIoT) adoption continues to proliferate, cybersecurity has become one of the top priorities. The Moxa Product Security Incident Response Team (PSIRT) takes a proactive approach to protect products from cybersecurity vulnerabilities. Moxa PSIRT investigates all reports of vulnerabilities that could potentially affect Moxa products. Moxa created a vulnerability management policy to provide guidance and information to our customers in the event of a reported vulnerability. The management policy ensures that Moxa’s customers have steady, unambiguous resources to help them understand how Moxa resolves or mitigates reported vulnerabilities. For any queries, please email [email protected].

Multiple product vulnerabilities were identified in Moxa’s NPort IA5000A Series Serial Device Servers. In response to this, Moxa has developed related solutions to address these vulnerabilities.

The identified vulnerability types and potential impacts are shown below:

Item Vulnerability Type Impact
1 Improper Access Control (CWE-284)
CVE-2020-27149, KLCERT-20-018		 Attackers can exploit this vulnerability to elevate the privilege level of the user controlled by them or to receive requests that require a higher privilege level.
2 Unprotected Storage of Credentials (CWE-256)
CVE-2020-27150, KLCERT-20-019		 An attacker can extract authentication credentials from a configuration file sent over an insecure communication channel. The data extracted can subsequently be used to authenticate via Moxa Service and change the device’s configurations.
3 Cleartext Transmission of Sensitive Information (CWE-319)
CVE-2020-27184, KLCERT-20-020		 An attacker could read all data transferred between the client and the device if the communication is carried out over Telnet, including authentication credentials, device configuration data, the device version, and other sensitive data.
4 Cleartext Transmission of Sensitive Information (CWE-319)
CVE-2020-27185, KLCERT-20-021		 Successfully exploiting this vulnerability could enable attackers to read all traffic sent when Moxa Service is enabled. This includes authentication data, device configurations, the device version, and other sensitive data.

 

This alert has come from: https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities