CVE-2020-27184
MEDIUMMoxa NPort IA5000A Series < 1.4/1.7 - Cleartext Transmission of Sensitive Information via Telnet
Title source: llmDescription
The NPort IA5000A Series devices use Telnet as one of the network device management services. Telnet does not support the encryption of client-server communications, making it vulnerable to Man-in-the-Middle attacks.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities
Various Sources x_refsource_misc
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-020%2C
Scores
CVSS v3
5.9
EPSS
0.0008
EPSS Percentile
24.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-319
Status
published
Products (3)
moxa/nport_ia5150a_firmware
< 1.4
moxa/nport_ia5250a_firmware
< 1.4
moxa/nport_ia5450a_firmware
< 1.7
Published
May 14, 2021
Tracked Since
Feb 18, 2026