https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:41:43.064346+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-04053 bdu:2020-04053 2026-10-03T13:41:43.070521+00:00 bdu:2020-04053 https://cve.radiocsirt.org/vuln/certfr-2020-avi-517 certfr-2020-avi-517 — De multiples vulnérabilités ont été découvertes dans Moxa NPort IAW5000A-I/O. Elles permettent à un attaquant de provoq… 2026-10-03T13:41:43.070560+00:00 certfr-2020-avi-517 https://cve.radiocsirt.org/vuln/euvd-2026-178374 EUVD-2026-178374 2026-10-03T13:41:43.070580+00:00 EUVD-2026-178374 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25196 fkie_cve-2020-25196 2026-10-03T13:41:43.070592+00:00

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication.

 https://cve.radiocsirt.org/vuln/ghsa-fwxv-g739-m9fm GHSA-fwxv-g739-m9fm 2026-10-03T13:41:43.070620+00:00

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication.

 https://cve.radiocsirt.org/vuln/gsd-2020-25196 gsd-2020-25196 2026-10-03T13:41:43.070635+00:00 gsd-2020-25196 https://cve.radiocsirt.org/vuln/icsa-20-287-01 ICSA-20-287-01 — MOXA NPort IAW5000A-I/O Series 2026-10-03T13:41:43.070645+00:00

The built-in WEB server has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user 's cookies.CVE-2020-25198 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The built-in WEB server has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges.CVE-2020-25194 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The built-in web service does not require users to have strong passwords.CVE-2020-25153 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The built-in web server stores and transmits the credentials of third-party services in cleartext.CVE-2020-25190 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The built-in web server allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication.CVE-2020-25196 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The bu…