7.5
CVE-2019-18238
- EPSS 0.15%
- Veröffentlicht 26.02.2020 22:15:11
- Zuletzt bearbeitet 21.11.2024 04:32:53
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginIn Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Moxa ≫ Iologik 2512 Firmware Version <= 3.0
Moxa ≫ Iologik 2512-t Firmware Version <= 3.0
Moxa ≫ Iologik 2512-hspa Firmware Version <= 3.0
Moxa ≫ Iologik 2512-hspa-t Firmware Version <= 3.0
Moxa ≫ Iologik 2512-wl1-eu Firmware Version <= 3.0
Moxa ≫ Iologik 2512-wl1-eu-t Firmware Version <= 3.0
Moxa ≫ Iologik 2512-wl1-us Firmware Version <= 3.0
Moxa ≫ Iologik 2512-wl1-us-t Firmware Version <= 3.0
Moxa ≫ Iologik 2512-wl1-jp Firmware Version <= 3.0
Moxa ≫ Iologik 2512-wl1-jp-t Firmware Version <= 3.0
Moxa ≫ Iologik 2542 Firmware Version <= 3.0
Moxa ≫ Iologik 2542-t Firmware Version <= 3.0
Moxa ≫ Iologik 2542-hspa Firmware Version <= 3.0
Moxa ≫ Iologik 2542-hspa-t Firmware Version <= 3.0
Moxa ≫ Iologik 2542-wl1-eu Firmware Version <= 3.0
Moxa ≫ Iologik 2542-wl1-eu-t Firmware Version <= 3.0
Moxa ≫ Iologik 2542-wl1-us Firmware Version <= 3.0
Moxa ≫ Iologik 2542-wl1-us-t Firmware Version <= 3.0
Moxa ≫ Iologik 2542-wl1-jp Firmware Version <= 3.0
Moxa ≫ Iologik 2542-wl1-jp-t Firmware Version <= 3.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.352 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-312 Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.