登录  免费注册
当前位置:首页 > 漏洞详细信息

Moxa NPort身份验证漏洞

 关注(0)  
CNVD-ID CNVD-2016-11880
公开日期 2016-12-05
危害级别 高 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
影响产品 Moxa NPort 5110 <2.6
Moxa NPort 5130/5150 <3.6
Moxa NPort 5200 <2.8
Moxa NPort 5400 <3.11
Moxa NPort 5600 <3.7
Moxa NPort P5150A <1.3
Moxa NPort 5100A <1.3
Moxa NPort 5200A <1.3
Moxa NPort 5150AI-M12 <1.2
Moxa NPort 5250AI-M12 <1.2
Moxa NPort 5450AI-M12 <1.2
Moxa NPort 5600-8-DT <2.4
Moxa NPort 5600-8-DTL <2.4
Moxa NPort 6x50 <1.13.11
Moxa NPort IA5450A <1.4
CVE ID CVE-2016-9366
漏洞描述 MOXA Nport是一款串口通讯服务器。

Moxa NPort存在身份验证漏洞。攻击者利用漏洞可暴力破解绕过身份验证。
漏洞类型 通用型漏洞
参考链接 https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02
漏洞解决方案 厂商已发布了升级版本,请及时下载更新:
NPort 5110 Version 2.6:
http://www.moxa.com/support/download.aspx?type=support&id=882 (link is external)
NPort 5130/5150 Series Version 3.6:
http://www.moxa.com/support/download.aspx?type=support&id=356 (link is external)
NPort 5200 Series Version 2.8:
http://www.moxa.com/support/download.aspx?type=support&id=904 (link is external)
NPort 5400 Series Version 3.11:
http://www.moxa.com/support/download.aspx?type=support&id=925 (link is external)
NPort 5600 Series Version 3.7:
http://www.moxa.com/support/download.aspx?type=support&id=905 (link is external)
NPort 5100A Series & NPort P5150A Version 1.3:
http://www.moxa.com/support/download.aspx?type=support&id=1403 (link is external)
NPort 5200A Series Version 1.3:
http://www.moxa.com/support/download.aspx?type=support&id=1462 (link is external)
NPort 5150AI-M12 Series Version 1.2:
http://www.moxa.com/support/download.aspx?type=support&id=2206 (link is external)
NPort 5250AI-M12 Series Version 1.2:
http://www.moxa.com/support/download.aspx?type=support&id=2207 (link is external)
NPort 5450AI-M12 Series Version 1.2:
http://www.moxa.com/support/download.aspx?type=support&id=2208 (link is external)
NPort 5600-8-DT Series Version 2.4:
http://www.moxa.com/support/download.aspx?type=support&id=938 (link is external)
NPort 5600-8-DTL Series Version 1.3:
http://www.moxa.com/support/download.aspx?type=support&id=1819 (link is external)
NPort 6x50 Series Version 1.14:
http://www.moxa.com/support/download.aspx?type=support&id=733 (link is external)
NPort IA5450A Version 1.4:
http://www.moxa.com/support/download.aspx?type=support&id=1469
厂商补丁 Moxa NPort身份验证漏洞的补丁
验证信息 (暂无验证信息)
报送时间 2016-12-05
收录时间 2016-12-05
更新时间 2016-12-06
漏洞附件 (无附件)
  在发布漏洞公告信息之前,CNVD都力争保证每条公告的准确性和可靠性。然而,采纳和实施公告中的建议则完全由用户自己决定,其可能引起的问题和结果也完全由用户承担。是否采纳我们的建议取决于您个人或您企业的决策,您应考虑其内容是否符合您个人或您企业的安全策略和流程。
(编辑:CNVD) | 已有0条评论
登录 后才能发表评论