CVE-2020-25153

Name of the Vulnerable Software and Affected Versions MOXA NPort IAW5000A-I/O versions 2.1 and earlier

Description The issue concerns the built-in web service of the MOXA NPort IAW5000A-I/O, which does not enforce strong passwords for users. This lack of password strength requirement could potentially lead to security issues.

Recommendations For MOXA NPort IAW5000A-I/O versions 2.1 and earlier, consider implementing strong password policies manually until a firmware update that enforces strong passwords is available. As a temporary workaround, restrict access to the web service to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.