CVE-2023-4929

NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability

Description

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

Remediation

Solution:

  • Due to design restrictions, we could not fix this vulnerability in NPort 5000 Series. We suggest users follow the instructions in the hardening guide https://www.moxa.com/getmedia/67b5e549-a125-4a6a-b99b-23017c75cfc1/moxa-the-security-hardening-guide-for-the-nport-5000-series-tech-note-v1.1.pdf in order to mitigate this vulnerability. Additionally, refer to the following mitigation measures to deploy the product in an appropriate product security context. Moxa recommends users follow these CISA recommendations. Users should * Reduce network exposure by ensuring that all control system devices and systems are not accessible from the Internet. * Place control system networks and remote devices behind firewalls, isolating them from business networks. * When remote access is necessary, employ secure methods such as Virtual Private Networks (VPNs). It is important to note that VPNs may have vulnerabilities and should be kept up to date with the latest available version. Remember that the security of a VPN depends on the security of its connected devices.

Category

6.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.04%
Vendor Advisory moxa.com
Affected: Moxa NPort 5000AI-M12 Series
Affected: Moxa NPort 5100 Series
Affected: Moxa NPort 5100A Series
Affected: Moxa NPort 5200 Series
Affected: Moxa NPort 5200A Series
Affected: Moxa NPort 5400 Series
Affected: Moxa NPort 5600 Series
Affected: Moxa NPort 5600-DT Series
Affected: Moxa NPort IA5000 Series
Affected: Moxa NPort IA5000A Series
Affected: Moxa NPort IA5000A-I/O Series
Affected: Moxa NPort IAW5000A-I/O Series
Affected: Moxa NPort P5150A Series
Published at:
Updated at:

References

Link Tags
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability vendor advisory

Frequently Asked Questions

What is the severity of CVE-2023-4929?
CVE-2023-4929 has been scored as a medium severity vulnerability.
How to fix CVE-2023-4929?
To fix CVE-2023-4929: Due to design restrictions, we could not fix this vulnerability in NPort 5000 Series. We suggest users follow the instructions in the hardening guide https://www.moxa.com/getmedia/67b5e549-a125-4a6a-b99b-23017c75cfc1/moxa-the-security-hardening-guide-for-the-nport-5000-series-tech-note-v1.1.pdf in order to mitigate this vulnerability. Additionally, refer to the following mitigation measures to deploy the product in an appropriate product security context. Moxa recommends users follow these CISA recommendations. Users should * Reduce network exposure by ensuring that all control system devices and systems are not accessible from the Internet. * Place control system networks and remote devices behind firewalls, isolating them from business networks. * When remote access is necessary, employ secure methods such as Virtual Private Networks (VPNs). It is important to note that VPNs may have vulnerabilities and should be kept up to date with the latest available version. Remember that the security of a VPN depends on the security of its connected devices.
Is CVE-2023-4929 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2023-4929 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-4929?
CVE-2023-4929 affects Moxa NPort 5000AI-M12 Series, Moxa NPort 5100 Series, Moxa NPort 5100A Series , Moxa NPort 5200 Series, Moxa NPort 5200A Series, Moxa NPort 5400 Series, Moxa NPort 5600 Series, Moxa NPort 5600-DT Series, Moxa NPort IA5000 Series, Moxa NPort IA5000A Series, Moxa NPort IA5000A-I/O Series, Moxa NPort IAW5000A-I/O Series, Moxa NPort P5150A Series.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.