Moxa NPort 5110, 5130, and 5150

An attacker could remotely access the device without credentials, potentially extract sensitive configuration data, disrupt serial communications to downstream equipment, or cause the device to become unresponsive, interrupting critical industrial operations that depend on serial-to-network connectivity.

Water and wastewater utilities, electric utilities, and manufacturing facilities that use Moxa NPort serial device servers (models 5110, 5130, 5150) to connect legacy industrial equipment like RTUs, PLCs, flow meters, or pressure sensors to modern networks. Any site with critical serial-based instrumentation or SCADA communication that depends on these serial gateways.

An attacker with network access to the device's IP address and port can send specially crafted requests directly to the NPort web interface or serial protocol handler. The lack of authentication allows immediate access to exploit input validation flaws, extract sensitive information, or trigger resource exhaustion conditions that degrade or halt device operation.