Medium severity6.5NVD Advisory· Published May 14, 2021· Updated Jun 17, 2026

CVE-2020-27149

Description

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Moxa/NPort IA5150A/IA5250A Seriesdescription
Moxa/Nport Ia5150a Firmware
cpe:2.3:o:moxa:nport_ia5150a_firmware:*:*:*:*:*:*:*:*
Range: <1.5
Moxa/Nport Ia5250a Firmware
cpe:2.3:o:moxa:nport_ia5250a_firmware:*:*:*:*:*:*:*:*
Range: <1.5
Moxa/Nport Ia5450a Firmware
cpe:2.3:o:moxa:nport_ia5450a_firmware:*:*:*:*:*:*:*:*
Range: <2.0
Moxa/NPort IA5150A/IA5250A Seriesllm-fuzzy
Range: <1.5

Patches

Vulnerability mechanics

References

www.moxa.com/en/support/product-support/security-advisory/nport-ia5000a-serial-device-servers-vulnerabilitiesnvdVendor Advisory
ics-cert.kaspersky.com/advisories/klcert-advisories/2021/05/11/klcert-20-018%2Cnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000