CVE-2016-2283
5.3
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD
Description
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
Affected (2)
Products: Moxa: Ioadmin Firmware, Iologik Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 3.17 | |
| Up to 3.11 |
| Running on/with | Platform Versions |
|---|---|
Moxa Iologik E2210 | All versions |
Moxa Iologik E2210 T | All versions |
Moxa Iologik E2212 | All versions |
Moxa Iologik E2212 T | All versions |
Moxa Iologik E2214 | All versions |
Moxa Iologik E2214 T | All versions |
Moxa Iologik E2240 | All versions |
Moxa Iologik E2240 T | All versions |
Moxa Iologik E2242 | All versions |
Moxa Iologik E2242 T | All versions |
Moxa Iologik E2260 | All versions |
Moxa Iologik E2260 T | All versions |
Moxa Iologik E2262 | All versions |
Moxa Iologik E2262 T | All versions |
Related CWEs
References (2)
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Timeline
No history available yet.