CVE-2021-32970: Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation
Published Apr 1, 2022
·Updated
Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions.
Affected Software
9 affected components
MOXA NPort IAW5000A-I/O Series firmware Version 2.2 or earlier
MOXA Nport Iaw5150a-6i\/o Firmware<=2.2
MOXA Nport Iaw5150a-6i\/o
MOXA Nport Iaw5150a-12i\/o Firmware<=2.2
MOXA Nport Iaw5150a-12i\/o
MOXA Nport Iaw5250a-6i\/o Firmware<=2.2
MOXA Nport Iaw5250a-6i\/o
MOXA Nport Iaw5250a-12i\/o Firmware<=2.2
MOXA Nport Iaw5250a-12i\/o
Remediation
Information
Moxa has developed solutions to address these vulnerabilities. Please contact Moxa Technical Support for a security patch.
Moxa has also published a security advisory to provide more information.
Event History
Apr 1, 2022
CVE Published
via MITRE·10:17 PM
Data Sourced
via MITRE·10:17 PM
RemedyDescriptionSeverityWeakness
Aug 3, 2024
Data Sourced
via ICS·11:42 PM
SeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-32970.
2
What is the severity level of CVE-2021-32970?
The severity level of CVE-2021-32970 is high with a CVSS score of 7.5.
3
What is the affected software for CVE-2021-32970?
The affected software for CVE-2021-32970 is Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier.
4
What can a remote attacker do with this vulnerability?
A remote attacker can cause denial-of-service conditions with this vulnerability.
5
How can I fix CVE-2021-32970?
To fix CVE-2021-32970, it is recommended to update to a version newer than 2.2 of the Moxa NPort IAW5000A-I/O series firmware.