7.5

CVE-2019-18238

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Moxa ≫ Iologik 2512 Firmware Version <= 3.0
   Moxa ≫ Iologik 2512 Version-
Moxa ≫ Iologik 2512-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-t Version-
Moxa ≫ Iologik 2512-hspa Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-hspa Version-
Moxa ≫ Iologik 2512-hspa-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-hspa-t Version-
Moxa ≫ Iologik 2512-wl1-eu Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-eu Version-
Moxa ≫ Iologik 2512-wl1-eu-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-eu-t Version-
Moxa ≫ Iologik 2512-wl1-us Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-us Version-
Moxa ≫ Iologik 2512-wl1-us-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-us-t Version-
Moxa ≫ Iologik 2512-wl1-jp Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-jp Version-
Moxa ≫ Iologik 2512-wl1-jp-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-jp-t Version-
Moxa ≫ Iologik 2542 Firmware Version <= 3.0
   Moxa ≫ Iologik 2542 Version-
Moxa ≫ Iologik 2542-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-t Version-
Moxa ≫ Iologik 2542-hspa Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-hspa Version-
Moxa ≫ Iologik 2542-hspa-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-hspa-t Version-
Moxa ≫ Iologik 2542-wl1-eu Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-eu Version-
Moxa ≫ Iologik 2542-wl1-eu-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-eu-t Version-
Moxa ≫ Iologik 2542-wl1-us Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-us Version-
Moxa ≫ Iologik 2542-wl1-us-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-us-t Version-
Moxa ≫ Iologik 2542-wl1-jp Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-jp Version-
Moxa ≫ Iologik 2542-wl1-jp-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-jp-t Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.384
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

https://www.us-cert.gov/ics/advisories/icsa-20-056-02
Third Party Advisory
US Government Resource