CVE-2016-9361

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort…

Critical · published February 13, 2017

CVSS v3.1
9.8
EPSS
20%
Percentile
97.5
In the wild
Unconfirmed
What it is

🚨 If you thought your admin passwords were safe, think again! An issue in Moxa NPort devices lets attackers retry passwords without any authentication — it's like having an open mic night for hackers! 🔥 This vulnerability is like giving someone unlimited tries at a vault's combination without ever having to prove they own it. Imagine if your bank let anyone keep spinning the lock until they got it right — that's the kind of risk we’re dealing with here! With this security flaw, an attacker could easily gain access to your device by trying multiple password combinations. This could lead to unauthorized control, potential data breaches, and devastating disruptions to your systems. It's a critical situation that demands your immediate attention!

Put simply

This vulnerability is like giving someone unlimited tries at a vault's combination without ever having to prove they own it. Imagine if your bank let anyone keep spinning the lock until they got it right — that's the kind of risk we’re dealing with here! The vulnerability allows unauthorized users to retry authentication attempts for admin passwords on several Moxa NPort devices without triggering any security measures, making brute-force attacks alarmingly easy.

What to do

With this security flaw, an attacker could easily gain access to your device by trying multiple password combinations. This could lead to unauthorized control, potential data breaches, and devastating disruptions to your systems. It's a critical situation that demands your immediate attention! Update all affected NPort devices to their latest firmware versions now! Specifically, make sure to patch to versions 2.6 for NPort 5110, 3.6 for NPort 5130/5150, and so on for all listed series. Don't let this critical vulnerability linger! You've got this! By taking these remediation steps, you’ll boost your security and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.20372 · 97.5th percentile
Published
2017-02-13T21:00Z
EPSS history
Timeline
  • 13 FEB 21:00Z
    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort…
    cvelistv5