CVE-2021-32970

Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:moxa:nport_iaw5150a-6i\/o_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:nport_iaw5150a-6i\/o:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:moxa:nport_iaw5150a-12i\/o_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:nport_iaw5150a-12i\/o:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:moxa:nport_iaw5250a-6i\/o_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:nport_iaw5250a-6i\/o:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:moxa:nport_iaw5250a-12i\/o_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:nport_iaw5250a-12i\/o:-:*:*:*:*:*:*:*

History

11 Apr 2022, 19:46

Type Values Removed Values Added
References (CONFIRM) https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 - (CONFIRM) https://www.cisa.gov/uscert/ics/advisories/icsa-21-187-01 - Mitigation, Third Party Advisory, US Government Resource
References (CONFIRM) https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities - (CONFIRM) https://www.moxa.com/en/support/product-support/security-advisory/nport-iaw5000a-io-serial-device-server-vulnerabilities - Third Party Advisory
CWE CWE-20
CPE cpe:2.3:h:moxa:nport_iaw5150a-12i\/o:-:*:*:*:*:*:*:*
cpe:2.3:h:moxa:nport_iaw5250a-12i\/o:-:*:*:*:*:*:*:*
cpe:2.3:o:moxa:nport_iaw5150a-6i\/o_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:moxa:nport_iaw5150a-12i\/o_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:moxa:nport_iaw5250a-6i\/o_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:nport_iaw5250a-6i\/o:-:*:*:*:*:*:*:*
cpe:2.3:o:moxa:nport_iaw5250a-12i\/o_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:nport_iaw5150a-6i\/o:-:*:*:*:*:*:*:*
First Time Moxa nport Iaw5150a-12i\/o
Moxa nport Iaw5250a-12i\/o Firmware
Moxa nport Iaw5150a-6i\/o
Moxa nport Iaw5250a-6i\/o
Moxa nport Iaw5250a-12i\/o
Moxa nport Iaw5150a-12i\/o Firmware
Moxa nport Iaw5250a-6i\/o Firmware
Moxa nport Iaw5150a-6i\/o Firmware
Moxa
CVSS v2 : unknown
v3 : unknown
v2 : 7.8
v3 : 7.5

01 Apr 2022, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-04-01 23:15

Updated : 2023-12-10 14:22


NVD link : CVE-2021-32970

Mitre link : CVE-2021-32970

CVE.ORG link : CVE-2021-32970


JSON object : View

Products Affected

moxa

  • nport_iaw5250a-6i\/o
  • nport_iaw5150a-12i\/o
  • nport_iaw5250a-12i\/o
  • nport_iaw5250a-6i\/o_firmware
  • nport_iaw5150a-12i\/o_firmware
  • nport_iaw5150a-6i\/o
  • nport_iaw5250a-12i\/o_firmware
  • nport_iaw5150a-6i\/o_firmware
CWE
CWE-20

Improper Input Validation