Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s

Description

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a NPort IA5000A Series with web console enabled

  • All versions before 1.5 for NPort IA5150A/IA5250A Series. All version before 2.0 for NPort 5450 Seriesaffected

References