Skip to content
Fencer Vulns
medium 6.5

CVE-2023-4929 json

NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

published 2023-10-03 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-54765

cvss
6.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 24%
public exploits
0
none known

Summary

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.31% chance of exploitation in the next 30 days, higher than 24% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
NVD 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Moxa NPort 5000AI-M12 Series
  • Moxa NPort 5100 Series
  • Moxa NPort 5100A Series
  • Moxa NPort 5200 Series
  • Moxa NPort 5200A Series
  • Moxa NPort 5400 Series
  • Moxa NPort 5600 Series
  • Moxa NPort 5600-DT Series
  • Moxa NPort IA5000 Series
  • Moxa NPort IA5000A Series
  • Moxa NPort IA5000A-I/O Series
  • Moxa NPort IAW5000A-I/O Series
  • Moxa NPort P5150A Series
  • moxa nport_5100ai_m12
  • moxa nport_5100
  • moxa nport_5100a
  • moxa nport_5200_series_firmware
  • moxa nport_5200a_series_firmware
  • moxa nport_5600_series_firmware
  • moxa nport_5600_dt
  • moxa nport_ia_5000
  • moxa nport_ia_5000a
  • moxa nport_ia_5000a_io
  • moxa nport_iaw_5000a_io
  • moxa nport_p5150a

Classification

Weakness
  • CWE-354 Improper Validation of Integrity Check Value

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.