CVE-2023-4929: NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-10-03 · updated 2026-06-17
Weakness: CWE-354

Description

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Affected products

Moxa Nport 5110-T Firmware: through 2.10
Moxa Nport 5110 Firmware: through 2.10
Moxa Nport 5110A-T Firmware: through 1.6
Moxa Nport 5110A Firmware: through 1.6
Moxa Nport 5130 Firmware: through 3.10
Moxa Nport 5130A-T Firmware: through 1.6
Moxa Nport 5130A Firmware: through 1.6
Moxa Nport 5150 Firmware: through 3.10
Moxa Nport 5150A-T Firmware: through 1.6
Moxa Nport 5150A Firmware: through 1.6
Moxa Nport 5150Ai-M12-Ct-T Firmware: through 1.5
Moxa Nport 5150Ai-M12-Ct Firmware: through 1.5
Moxa Nport 5150Ai-M12-T Firmware: through 1.5
Moxa Nport 5150Ai-M12 Firmware: through 1.5
Moxa Nport 5210-T Firmware: through 2.12
Moxa Nport 5210 Firmware: through 2.12
Moxa Nport 5210A-T Firmware: through 1.6
Moxa Nport 5210A Firmware: through 1.6
Moxa Nport 5230-T Firmware: through 2.12
Moxa Nport 5230 Firmware: through 2.12
Moxa Nport 5230A-T Firmware: through 1.6
Moxa Nport 5230A Firmware: through 1.6
Moxa Nport 5232-T Firmware: through 2.12
Moxa Nport 5232 Firmware: through 2.12
Moxa Nport 5232I-T Firmware: through 2.12
Moxa Nport 5232I Firmware: through 2.12
Moxa Nport 5250A-T Firmware: through 1.6
Moxa Nport 5250A Firmware: through 1.6
Moxa Nport 5250Ai-M12-Ct-T Firmware: through 1.5
Moxa Nport 5250Ai-M12-Ct Firmware: through 1.5

References

Get alerted when CVE-2023-4929 or the next vulnerability affects your stack