CVE-2023-4929 MEDIUM

CVE-2023-4929: NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

Vendor Moxa
Product NPort 5000AI-M12 Series
Weakness CWE-354
Published October 3, 2023
Last update September 23, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

What the vulnerability does

01Description

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Key dates

02Disclosure timeline

October 3, 2023 CVE published
September 23, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-7096 Comodo Internet Security Premium Manifest File cis_update_x64.xml integrity check CVE-2017-3224 Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency in affected Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages) CVE-2026-31839 Striae has a hash validation utility vulnerability CVE-2023-28002 CVE-2016-15028 ICEPAY REST-API-NET Checksum Validation RestClient.cs RestClient integrity check