CVE-2020-12117

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-01 · updated 2026-06-17
Weakness: CWE-306

Description

Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration values via a crafted packet to UDP port 4800. NOTE: Moxa Service is an unauthenticated service that runs upon a first-time installation but can be disabled without ill effect.

Affected products

Moxa Nport 5100A Firmware: through 1.5

References

https://blog.scadafence.com/technical-blog-cve-2020-12117-industrial-iot-insecure-default-configurations
https://www.moxa.com/en/support/support/security-advisory/nport-5100a-series-serial-device-servers-vulnerability
https://blog.scadafence.com/technical-blog-cve-2020-12117-industrial-iot-insecure-default-configurations
https://www.moxa.com/en/support/support/security-advisory/nport-5100a-series-serial-device-servers-vulnerability

Get alerted when CVE-2020-12117 or the next vulnerability affects your stack