Telnet Vulnerability in Moxa NPort IA5000A Series Devices
CVE-2020-27184

5.9MEDIUM

Key Information:

Vendor
Moxa
Vendor
CVE Published:
14 May 2021

Summary

The NPort IA5000A Series devices expose users to security risks due to the use of Telnet as a network device management service. Telnet communications are not encrypted, enabling potential Man-in-the-Middle attacks that could lead to unauthorized access or control over the devices involved. This makes it crucial for users to implement additional security measures or consider using alternative protocols that offer encrypted communication.

Affected Version(s)

NPort IA5000A Series with Telnet enabled All versions

References

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.