CVE-2020-25153 – The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1

The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25153

Reference (s):

• https://us-cert.cisa.gov/ics/advisories/icsa-20-287-01
• URL: https://us-cert.cisa.gov/ics/advisories/icsa-20-287-01