CVE-2023-4929mediumCWE-354

CVE-2023-4929: medium-severity vulnerability in Moxa NPort 5000AI-M12 Series

NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

Published · Updated

Follow this CVE+ Monitor NPort IAW5000A-I/O series+ Monitor NPort 5100A Series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.3%
All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Affected products
Moxa · NPort 5000AI-M12 SeriesMoxa · NPort 5100A SeriesMoxa · NPort 5100 SeriesMoxa · NPort 5200A SeriesMoxa · NPort 5200 SeriesMoxa · NPort 5400 SeriesMoxa · NPort 5600-DT SeriesMoxa · NPort 5600 SeriesMoxa · NPort IA5000A-I/O SeriesMoxa · NPort IA5000A SeriesMoxa · NPort IA5000 SeriesMoxa · NPort IAW5000A-I/O SeriesMoxa · NPort P5150A Series
Related CVEs — Moxa NPort 5000AI-M12 Series

In the same product, most dangerous first.

CVE-2024-3576HIGHNPort 5100A Series Store XSS VulnerabilityEPSS 0.4%CVE-2025-15017HIGHCVE-2025-15017EPSS 0.3%