CVE-2016-2282

Published: Mar 4, 2016Modified: May 6, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.

Affected (2)

Products: Moxa: Ioadmin Firmware, Iologik Firmware

Moxa

2 products

Ioadmin Firmware

Iologik Firmware

Configuration A

2 vulnerable · 14 platform

Vulnerable Software	Affected Versions
Moxa Ioadmin Firmware	Up to 3.17
Moxa Iologik Firmware	Up to 3.11

Running on/with	Platform Versions
Moxa Iologik E2210	All versions
Moxa Iologik E2210 T	All versions
Moxa Iologik E2212	All versions
Moxa Iologik E2212 T	All versions
Moxa Iologik E2214	All versions
Moxa Iologik E2214 T	All versions
Moxa Iologik E2240	All versions
Moxa Iologik E2240 T	All versions
Moxa Iologik E2242	All versions
Moxa Iologik E2242 T	All versions
Moxa Iologik E2260	All versions
Moxa Iologik E2260 T	All versions
Moxa Iologik E2262	All versions
Moxa Iologik E2262 T	All versions

Related CWEs

CWE-255

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.