CVE-2016-9365: CSRF
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. Requests are not verified to be intentionally submitted by the proper user (CROSS-SITE REQUEST FORGERY).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9365?
CVE-2016-9365 is classified as a high severity vulnerability.
How do I fix CVE-2016-9365?
To fix CVE-2016-9365, upgrade the firmware of affected Moxa NPort devices to the latest version specified in the advisory.
What devices are affected by CVE-2016-9365?
CVE-2016-9365 affects various Moxa NPort devices including versions prior to 2.6 of NPort 5110 and other series as detailed in the advisory.
Can I still use Moxa NPort devices with CVE-2016-9365?
Using Moxa NPort devices with CVE-2016-9365 presents significant security risks, so it is advised to apply the necessary firmware updates.
Is CVE-2016-9365 a remote vulnerability?
Yes, CVE-2016-9365 can be exploited remotely, potentially allowing an attacker to gain unauthorized access.