CVE-2021-32968: high-severity vulnerability in Moxa NPort IAW5000A-I/O Series firmware
Moxa NPort IAW5000A-I/O Series Serial Device Server Classic Buffer Overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The web server in Moxa NPort IAW5000A-I/O devices has buffer overflow flaws that can be exploited remotely to crash the device, making it unavailable. This is critical because these devices manage serial communications in industrial environments.
Two buffer overflow vulnerabilities (CWE-120) exist in the built-in web server of Moxa NPort IAW5000A-I/O Series firmware ≤2.2. A remote attacker can send specially crafted HTTP requests to trigger memory corruption, resulting in denial-of-service via device crash. No authentication is required for exploitation.