CVE-2017-16719 Other in Moxa NPort 5110, 5130, and 5150
Attackers can inject packets to disrupt the availability of Moxa NPort serial device servers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-16719?
CVE-2017-16719 is a high-severity vulnerability in Moxa NPort 5110, 5130, and 5150, published on 16 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to inject packets that could potentially disrupt the availability of the device.
Weakness: CWE-74
Which versions are affected by CVE-2017-16719?
It affects 3 products.
Products include Moxa Nport 5110 Firmware, Moxa Nport 5130 Firmware, Moxa Nport 5150 Firmware.
How do I fix CVE-2017-16719?
No fix has been published for CVE-2017-16719 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-16719 being exploited?
There is no known exploitation of CVE-2017-16719 in the wild and no public exploit code.
Other vulnerabilities in Moxa NPort 5110, 5130, and 5150
Sources
Also known as GHSA-xvx8-mgqv-q2fj.