Cross-Site Scripting Vulnerability in Moxa NPort Series
CVE-2016-9371

6.1MEDIUM

Key Information:

Vendor

Moxa
Status
Moxa Nport
Vendor
CVE Published:
13 February 2017

What is CVE-2016-9371?

A Cross-Site Scripting vulnerability exists in several versions of the Moxa NPort series devices. The flaw arises from inadequate handling of user-controlled input, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability affects various models within the NPort series and can compromise the security of web applications, enabling unauthorized actions or data theft. It is essential for users to remain vigilant and apply the latest firmware updates to mitigate this risk.

Affected Version(s)

Moxa NPort Moxa NPort

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-336-02
x_refsource_MISC
http://www.securityfocus.com/bid/85965
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.