CVE-2020-25198 — MOXA NPort IAW5000A-I/O Series
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to g…
Published: 2020-12-23 · CVSS: 8.8 · CVSS 3.1
The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7