CVE-2023-4204

MediumCVSS 5.4

Published: 16/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

25th percentile - higher than 25% of all known CVEs

Summary

NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerability, posing a potential risk to the security and integrity of the affected device. The presence of a hardcoded key could potentially facilitate firmware manipulation.

Risk Assessment

This vulnerability may lead to unauthorized firmware manipulation, jeopardizing the security of the device and the data it processes.

Recommendation

It is recommended to update the firmware to the latest version to eliminate hardcoded credentials and minimize the risk of manipulation.

Original NVD description (English source)

NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate firmware manipulation.