CVE-2017-14028

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-16 · updated 2026-06-17
Weakness: CWE-400

Description

A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exhaust memory resources by sending a large amount of TCP SYN packets.

Affected products

Moxa Nport 5110 Firmware: 2.2, 2.4, 2.6, 2.7
Moxa Nport 5130 Firmware: through 3.7
Moxa Nport 5150 Firmware: through 3.7

References

http://www.securityfocus.com/bid/101885
https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01
http://www.securityfocus.com/bid/101885
https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01

Get alerted when CVE-2017-14028 or the next vulnerability affects your stack