7.5

CVE-2020-7003

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Moxa ≫ Iologik 2512 Firmware Version <= 3.0
   Moxa ≫ Iologik 2512 Version -
Moxa ≫ Iologik 2512-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-t Version -
Moxa ≫ Iologik 2512-hspa Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-hspa Version -
Moxa ≫ Iologik 2512-hspa-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-hspa-t Version -
Moxa ≫ Iologik 2512-wl1-eu Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-eu Version -
Moxa ≫ Iologik 2512-wl1-eu-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-eu-t Version -
Moxa ≫ Iologik 2512-wl1-us Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-us Version -
Moxa ≫ Iologik 2512-wl1-us-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-us-t Version -
Moxa ≫ Iologik 2512-wl1-jp Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-jp Version -
Moxa ≫ Iologik 2512-wl1-jp-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2512-wl1-jp-t Version -
Moxa ≫ Iologik 2542 Firmware Version <= 3.0
   Moxa ≫ Iologik 2542 Version -
Moxa ≫ Iologik 2542-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-t Version -
Moxa ≫ Iologik 2542-hspa Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-hspa Version -
Moxa ≫ Iologik 2542-hspa-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-hspa-t Version -
Moxa ≫ Iologik 2542-wl1-eu Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-eu Version -
Moxa ≫ Iologik 2542-wl1-eu-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-eu-t Version -
Moxa ≫ Iologik 2542-wl1-us Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-us Version -
Moxa ≫ Iologik 2542-wl1-us-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-us-t Version -
Moxa ≫ Iologik 2542-wl1-jp Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-jp Version -
Moxa ≫ Iologik 2542-wl1-jp-t Firmware Version <= 3.0
   Moxa ≫ Iologik 2542-wl1-jp-t Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.97% 0.587
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-319 Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

https://www.us-cert.gov/ics/advisories/icsa-20-056-02
Third Party Advisory
US Government Resource