HIGH🇵🇱 Wersja polska

CVE-2019-18238

CVSS 7.5v3.1pub. 2020-02-26upd. 2024-11-21

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Moxa Iologik 2512

    HW
    Moxa
    all versions

  • Moxa Iologik 2512 Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2512 Hspa

    HW
    Moxa
    all versions

  • Moxa Iologik 2512 Hspa Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2512 Hspa T

    HW
    Moxa
    all versions

  • Moxa Iologik 2512 Hspa T Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2512 T

    HW
    Moxa
    all versions

  • Moxa Iologik 2512 T Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2512 Wl1 Eu

    HW
    Moxa
    all versions

  • Moxa Iologik 2512 Wl1 Eu Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2512 Wl1 Eu T

    HW
    Moxa
    all versions

  • Moxa Iologik 2512 Wl1 Eu T Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2512 Wl1 Jp

    HW
    Moxa
    all versions

  • Moxa Iologik 2512 Wl1 Jp Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2512 Wl1 Jp T

    HW
    Moxa
    all versions

  • Moxa Iologik 2512 Wl1 Jp T Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2512 Wl1 Us

    HW
    Moxa
    all versions

  • Moxa Iologik 2512 Wl1 Us Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2512 Wl1 Us T

    HW
    Moxa
    all versions

  • Moxa Iologik 2512 Wl1 Us T Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2542

    HW
    Moxa
    all versions

  • Moxa Iologik 2542 Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2542 Hspa

    HW
    Moxa
    all versions

  • Moxa Iologik 2542 Hspa Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2542 Hspa T

    HW
    Moxa
    all versions

  • Moxa Iologik 2542 Hspa T Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2542 T

    HW
    Moxa
    all versions

  • Moxa Iologik 2542 T Firmware

    OS
    Moxa
    ≤ 3.0

  • Moxa Iologik 2542 Wl1 Eu

    HW
    Moxa
    all versions

  • Moxa Iologik 2542 Wl1 Eu Firmware

    OS
    Moxa
    ≤ 3.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-18242HIGH7.5same product

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 ...

CVE-2020-7003HIGH7.5same product

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 ...

CVE-2023-39979CRITICAL9.8PL ✓same vendor

Podatność Auth Bypass w Moxa MXsecurity — niewystarczająca losowość uwierzytelnienia

CVE-2023-33236CRITICAL9.8PL ✓same vendor

Moxa MXsecurity – hardcoded credentials umożliwiające bypass uwierzytelnienia

CVE-2023-28697CRITICAL9.8PL ✓same vendor

Moxa MiiNePort E1 — brak kontroli dostępu umożliwia zdalne przejęcie urządzenia