Description
A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface does not properly validate whether a sender is associated with a valid data port session before accepting break signal commands. A remote attacker with network access can send crafted requests to disrupt serial communication for an active user session.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Moxa NPort 6000 Series
Default version status: unaffected
1.0 to ≤ 2.3affected
Moxa CN2600 Series
Default version status: unaffected
1.0 to ≤ 4.6affected