Is CVE-2016-9348 actively exploited?

No active exploitation of CVE-2016-9348 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2016-9348 be exploited remotely?

No. CVE-2016-9348 requires local access to exploit.

What is the CVSS score of CVE-2016-9348?

CVE-2016-9348 has a CVSS score of 3.3 (LOW).

HOME VULNERABILITIESCVE-2016-9348

LOW

CVE-2016-9348

CWE-255Published: February 13, 2017· Updated: Jun 17, 2026

3.3

CVSS v3.1

Official Description

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. A configuration file contains parameters that represent passwords in plaintext.

NVD Source

Technical Analysis

CVE-2016-9348 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityNone

AvailabilityNone

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected Vendors & Products

moxa51 product(s)

nport 5100 series firmwarenport 5110nport 5130nport 5150nport 5200 series firmwarenport 5210nport 5230nport 5232nport 5232inport 5400 series firmwarenport 5410nport 5430+39

Source: NVD CPE · 51 total CPE entries