{"id":"CVE-2023-5627","aliases":["EUVD-2023-57920","GHSA-7477-pxvj-g72x"],"status":"published","title":"Incorrect Implementation of Authentication Algorithm Vulnerability","description":"A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00374,"percentile":0.31631,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-257","CWE-287","CWE-303","CWE-327"],"published":"2023-11-01T15:04:13Z","modified":"2026-06-17T06:48:58Z","products":[{"vendor":"moxa","product":"nport 6000 series"},{"vendor":"moxa","product":"nport_6000"},{"vendor":"moxa","product":"nport_6150-t_firmware"},{"vendor":"moxa","product":"nport_6150_firmware"},{"vendor":"moxa","product":"nport_6250-m-sc-t_firmware"},{"vendor":"moxa","product":"nport_6250-m-sc_firmware"},{"vendor":"moxa","product":"nport_6250-s-sc-t_firmware"},{"vendor":"moxa","product":"nport_6250-s-sc_firmware"},{"vendor":"moxa","product":"nport_6250-t_firmware"},{"vendor":"moxa","product":"nport_6250_firmware"},{"vendor":"moxa","product":"nport_6450-t_firmware"},{"vendor":"moxa","product":"nport_6450_firmware"},{"vendor":"moxa","product":"nport_6610-16-48v_firmware"},{"vendor":"moxa","product":"nport_6610-16_firmware"},{"vendor":"moxa","product":"nport_6610-32-48v_firmware"},{"vendor":"moxa","product":"nport_6610-32_firmware"},{"vendor":"moxa","product":"nport_6610-8-48v_firmware"},{"vendor":"moxa","product":"nport_6610-8_firmware"},{"vendor":"moxa","product":"nport_6650-16-48v_firmware"},{"vendor":"moxa","product":"nport_6650-16-hv-t_firmware"},{"vendor":"moxa","product":"nport_6650-16-t_firmware"},{"vendor":"moxa","product":"nport_6650-16_firmware"},{"vendor":"moxa","product":"nport_6650-32-48v_firmware"},{"vendor":"moxa","product":"nport_6650-32-hv-t_firmware"},{"vendor":"moxa","product":"nport_6650-32_firmware"},{"vendor":"moxa","product":"nport_6650-8-48v_firmware"},{"vendor":"moxa","product":"nport_6650-8-hv-t_firmware"},{"vendor":"moxa","product":"nport_6650-8-t_firmware"},{"vendor":"moxa","product":"nport_6650-8_firmware"}],"references":[{"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerability","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5627"},{"url":"https://github.com/advisories/GHSA-7477-pxvj-g72x"}],"sources":{"cve":[{"id":"CVE-2023-5627","title":"Incorrect Implementation of Authentication Algorithm Vulnerability","description":"A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service. \n","status":"published","published":"2023-11-01T15:04:13.625Z","modified":"2024-09-05T15:45:44.046Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-303","CWE-257","CWE-327"],"updated_at":"2026-11-02T14:35:16.771348Z"}],"euvd":[{"id":"EUVD-2023-57920","description":"A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service. \n","status":"published","published":"2023-11-01T15:04:13Z","modified":"2024-09-05T15:45:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T00:56:03.195853Z"}],"ghsa":[{"id":"GHSA-7477-pxvj-g72x","title":"A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism...","description":"A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service. \n","status":"published","published":"2023-11-01T18:30:33Z","modified":"2023-11-18T05:04:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-257","CWE-287"],"updated_at":"2026-11-02T14:55:04.479575Z"}],"nvd":[{"id":"CVE-2023-5627","description":"A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service. \n","status":"published","published":"2023-11-01T16:15:08.79Z","modified":"2026-06-17T06:48:58.247Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-257","CWE-303","CWE-327","CWE-287"],"updated_at":"2026-11-02T14:08:41.047232Z"}]}}