2 lines
4.9 KiB
JSON
2 lines
4.9 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"NPort W2150A/W2250A Series","vendor":"Moxa","versions":[{"lessThanOrEqual":"2.3","status":"affected","version":"1.0","versionType":"custom"}]}],"source":"psirt@moxa.com"},{"affectedData":[{"cpes":["cpe:2.3:o:moxa:nport_w2150a_firmware:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"nport_w2150a_firmware","vendor":"moxa","versions":[{"lessThanOrEqual":"2.3","status":"affected","version":"1.0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:nport_w2150a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B237CFAF-EFBB-4C81-BC6A-0D12E63CAA91","versionEndIncluding":"2.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:nport_w2150a:-:*:*:*:*:*:*:*","matchCriteriaId":"1E4BE331-7243-4BBC-BEFD-213B5C33441F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:nport_w2250a_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"84549BD7-66FE-45F5-990F-B66421D80293","versionEndIncluding":"2.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:nport_w2250a:-:*:*:*:*:*:*:*","matchCriteriaId":"1D6E4427-6FD7-412F-B2EC-5A0E99A5E343","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:nport_w2150a-t_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AF48CDC9-BA18-4619-A8DD-8E3DA812BC4A","versionEndIncluding":"2.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:nport_w2150a-t:-:*:*:*:*:*:*:*","matchCriteriaId":"D69E0437-3972-4E71-9296-73590722B065","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:nport_w2250a-t_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"17C6C8F8-596A-4996-9E19-91C30CF9FE35","versionEndIncluding":"2.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:nport_w2250a-t:-:*:*:*:*:*:*:*","matchCriteriaId":"869281AB-BBAB-4007-9F25-4DE4B1B0114B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and prior allows a remote attacker to exploit the vulnerability by sending crafted payload to the web service. Successful exploitation of the vulnerability could result in denial of service.\n\n"},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en el servidor web integrado en la versión 2.3 y anteriores del firmware de la serie Moxa NPort W2150A/W2250A permite a un atacante remoto explotar la vulnerabilidad enviando un payload manipulado al servicio web. La explotación exitosa de la vulnerabilidad podría resultar en la denegación del servicio."}],"id":"CVE-2024-1220","lastModified":"2026-06-17T07:03:44.617","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":4.2,"source":"psirt@moxa.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-1220","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-03-06T19:33:23.992159Z","version":"2.0.3"}}]},"published":"2024-03-06T02:15:44.810","references":[{"source":"psirt@moxa.com","tags":["Vendor Advisory"],"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-238975-nport-w2150a-w2250a-series-web-server-stack-based-buffer-overflow-vulnerability"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-238975-nport-w2150a-w2250a-series-web-server-stack-based-buffer-overflow-vulnerability"}],"sourceIdentifier":"psirt@moxa.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"}],"source":"psirt@moxa.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-787"}],"source":"nvd@nist.gov","type":"Primary"}]}
|