CVE-2023-4929CWE-354

NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

Medium · published October 3, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
23.0
In the wild
Unconfirmed
What it is

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00314 · 23.0th percentile
Weakness
CWE-354 · Improper Validation of Integrity Check Value
Published
2023-10-03T13:54Z
EPSS history
Timeline
  • 03 OCT 13:54Z
    NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability
    cvelistv5