Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 | Mitigation Third Party Advisory US Government Resource |
| https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities | Vendor Advisory |
| https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 | Mitigation Third Party Advisory US Government Resource |
| https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
History
21 Nov 2024, 06:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 - Mitigation, Third Party Advisory, US Government Resource | |
| References | () https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities - Vendor Advisory |
Information
Published : 2022-04-01 23:15
Updated : 2024-11-21 06:08
NVD link : CVE-2021-32976
Mitre link : CVE-2021-32976
CVE.ORG link : CVE-2021-32976
JSON object : View
Products Affected
moxa
- nport_iaw5150a-12i\/o_firmware
- nport_iaw5250a-12i\/o_firmware
- nport_iaw5250a-12i\/o
- nport_iaw5150a-12i\/o
- nport_iaw5250a-6i\/o_firmware
- nport_iaw5250a-6i\/o
- nport_iaw5150a-6i\/o
- nport_iaw5150a-6i\/o_firmware