CVE-2017-14028 Denial of service in Moxa NPort 5110, 5130, and 5150
An attacker can cause denial of service on Moxa NPort devices by exhausting memory resources through a flood of TCP SYN packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-14028?
CVE-2017-14028 is a high-severity denial of service vulnerability in Moxa NPort 5110, 5130, and 5150, published on 16 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exhaust memory resources by sending a large amount of TCP SYN packets.
Weakness: CWE-400
Which versions are affected by CVE-2017-14028?
It affects 3 products.
Products include Moxa Nport 5110 Firmware, Moxa Nport 5130 Firmware, Moxa Nport 5150 Firmware.
How do I fix CVE-2017-14028?
No fix has been published for CVE-2017-14028 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2017-14028 being exploited?
There is no known exploitation of CVE-2017-14028 in the wild and no public exploit code.
Other vulnerabilities in Moxa NPort 5110, 5130, and 5150
Sources
Also known as GHSA-wx77-p7qv-fm55.