CVE-2020-25192 MEDIUM

CVE-2020-25192: MOXA NPort IAW5000A-I/O Series

Vendor Moxa

Product NPort IAW5000A-I/O

Weakness CWE-200 · Info exposure

Published December 23, 2020

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization.

Key dates

02Disclosure timeline

December 23, 2020 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-25192 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

Identifiers

CVE CVE-2020-25192

CWE CWE-200

CVSS 5.3 / MEDIUM

Affected versions