Configuration Weakness in Moxa NPort Devices Exposing Plaintext Passwords

CVE-2016-9348

What is CVE-2016-9348?

A significant vulnerability exists in multiple series of Moxa NPort devices due to a misconfiguration within the device's configuration file. This issue allows sensitive parameters, including passwords, to be stored in plaintext, enhancing the risk of unauthorized access and exploitation by malicious actors. Device versions prior to the respective thresholds contain this flaw, highlighting the importance of timely updates to mitigate potential security threats.

References