CVE-2020-27184

The NPort IA5000A Series devices use Telnet as one of the network device management services....

5.9 Medium

The NPort IA5000A Series devices use Telnet as one of the network device management services. Telnet does not support the encryption of client-server communications, making it vulnerable to Man-in-the-Middle attacks.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.32%Down 0.3 points since May 15, 2021

What each source reports

NVD Score used 5.9

Record: CVE-2020-27184
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness: CWE-319
Updated: 2026-11-02

CVE List No score

Record: CVE-2020-27184
Updated: 2026-11-02

EUVDEUVD-2020-19707 No score

Record: EUVD-2020-19707
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7cmj-xmp5-mmr2 5.9

The NPort IA5000A Series devices use Telnet as one of the network device management services....

Record: GHSA-7cmj-xmp5-mmr2
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-326
Updated: 2026-11-02

Affected products

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-27184 is a medium vulnerability (CVSS 5.9) in Moxa Nport Ia5150a Firmware, published May 14, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. No source names a fixed version.