CVE-2021-32976: critical vulnerability in Moxa NPort IAW5000A-I/O series firmware
Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The web server in Moxa NPort IAW5000A-I/O devices has multiple memory vulnerabilities that let remote attackers crash the device or run malicious code without authentication.
Five stack-based buffer overflows in the built-in web server of NPort IAW5000A-I/O firmware ≤2.2 allow unauthenticated remote code execution and denial-of-service via malformed HTTP requests. The vulnerabilities enable attackers to overwrite stack memory and seize control of program execution.
In the same product, most dangerous first.