CVE-2020-27149

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-05-14 · updated 2026-06-17

Description

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed.

Affected products

Moxa Nport Ia5150A Firmware: before 1.5 — fixed in 1.5
Moxa Nport Ia5250A Firmware: before 1.5 — fixed in 1.5
Moxa Nport Ia5450A Firmware: before 2.0 — fixed in 2.0

How to fix

Upgrade to a fixed version: Moxa Nport Ia5150A Firmware 1.5; Moxa Nport Ia5250A Firmware 1.5; Moxa Nport Ia5450A Firmware 2.0. Check the vendor advisory for mitigations.

References

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-018%2C
https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-018%2C
https://www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilities

Get alerted when CVE-2020-27149 or the next vulnerability affects your stack