CVE-2017-16715 Information disclosure in Moxa NPort 5110, 5130, and 5150
An attacker can exploit Ethernet frame padding handling flaws in Moxa NPort devices to expose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-16715?
CVE-2017-16715 is a high-severity vulnerability in Moxa NPort 5110, 5130, and 5150, published on 16 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame padding that may allow for information exposure.
Weakness: CWE-200
Which versions are affected by CVE-2017-16715?
It affects 3 products.
Products include Moxa Nport 5110 Firmware, Moxa Nport 5130 Firmware, Moxa Nport 5150 Firmware.
How do I fix CVE-2017-16715?
No fix has been published for CVE-2017-16715 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-16715 being exploited?
There is no known exploitation of CVE-2017-16715 in the wild and no public exploit code.
Other vulnerabilities in Moxa NPort 5110, 5130, and 5150
Sources
Also known as GHSA-2pfg-hhw6-6h8g.