CVE-2024-3576

The NPort 5100A Series firmware version v1.6 and prior versions are affected by web server XSS vulnerability. The vulnerability is caused by not correctly neutralizing user-controllable input before placing it in output. Malicious users may use the vulnerability to get sensitive information and escalate privileges.

Score

CVSS 3.1 8.3 High

Status

Deferred - psirt@moxa.com

Published

2024-05-06

Last modified

2024-08-01

Weaknesses

CWE-79

Affected products

• Nport 5100a Series (Moxa)
• Nport 5100a Series Firmware (Moxa)

References

• https://www.moxa.com/en/support/product-support/security-advisory/mpsa-246328-nport-5100a-series-store-xss-vulnerability