CVE:CVE-2016-9365
CNNVD:CNNVD-201612-034
Moxa NPort P5150A等都是摩莎（Moxa）公司的用于将工业串口设备连上网络的串口通讯服务器。
多款Moxa Nport产品中存在跨站请求伪造漏洞。攻击者可通过发送特制的请求利用该漏洞执行未授权操作。以下版本受到影响：NPort 5110 2.6之前的版本；NPort 5130/5150系列 3.6之前的版本；NPort 5200系列 2.8之前的版本；NPort 5400系列 3.11之前的版本；NPort 5600系列 3.7之前的版本；NPort 5100A系列 1.3之前的版本和NPort P5150A 1.3之前的版本；NPort 5200A系列 1.3之前的版本；NPort 5150AI-M12系列 1.2之前的版本；NPort 5250AI-M12系列 1.2之前的版本；NPort 5450AI-M12系列 1.2之前的版本；NPort 5600-8-DT系列 2.4之前的版本；NPort 5600-8-DTL系列 2.4之前的版本；NPort 6x50系列 1.13.11之前的版本；NPort IA5450A v1.4之前的版本。
solution:Upgrade moxa nport_5100_series_firmware to a higher version than 2.5,3.5,and avoid the version (,2.5],(,3.5]; Upgrade moxa nport_5200_series_firmware to a higher version than 2.7,and avoid the version (,2.7]; Upgrade moxa nport_5400_series_firmware to a higher version than 3.10,and avoid the version (,3.10]; Upgrade moxa nport_5600_series_firmware to a higher version than 3.6,and avoid the version (,3.6]; Upgrade moxa nport_5100a_series_firmware to a higher version than 1.2,and avoid the version (,1.2]; Upgrade moxa nport_p5150a_series_firmware to a higher version than 1.2,and avoid the version (,1.2]; Upgrade moxa nport_5200a_series_firmware to a higher version than 1.2,and avoid the version (,1.2]; Upgrade moxa nport_5x50a1-m12_series_firmware to a higher version than 1.1,and avoid the version (,1.1]; Upgrade moxa nport_5600-8-dtl_series_firmware to a higher version than 2.3,and avoid the version (,2.3]; Upgrade moxa nport_6100_series_firmware to a higher version than 1.13,and avoid the version (,1.13]