Search criteria
6 vulnerabilities found for ioadmin_firmware by moxa
FKIE_CVE-2016-2283
Vulnerability from fkie_nvd - Published: 2016-03-04 15:59 - Updated: 2025-04-12 10:46
Severity ?
Summary
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
References
| URL | Tags | ||
|---|---|---|---|
| ics-cert@hq.dhs.gov | https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01 | Third Party Advisory, US Government Resource | |
| af854a3a-2127-422b-91ae-364da2661108 | https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01 | Third Party Advisory, US Government Resource |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| moxa | ioadmin_firmware | * | |
| moxa | iologik_firmware | * | |
| moxa | iologik_e2210 | - | |
| moxa | iologik_e2210-t | - | |
| moxa | iologik_e2212 | - | |
| moxa | iologik_e2212-t | - | |
| moxa | iologik_e2214 | - | |
| moxa | iologik_e2214-t | - | |
| moxa | iologik_e2240 | - | |
| moxa | iologik_e2240-t | - | |
| moxa | iologik_e2242 | - | |
| moxa | iologik_e2242-t | - | |
| moxa | iologik_e2260 | - | |
| moxa | iologik_e2260-t | - | |
| moxa | iologik_e2262 | - | |
| moxa | iologik_e2262-t | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:moxa:ioadmin_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "83193E46-EC52-400F-A426-17E710048BA5",
"versionEndIncluding": "3.17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:moxa:iologik_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3285A152-0075-4B61-BE61-60C5E92E8E54",
"versionEndIncluding": "3.11",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:moxa:iologik_e2210:-:*:*:*:*:*:*:*",
"matchCriteriaId": "861285B9-D63C-42A7-B694-A6F68DF5489B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2210-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "93099C60-C5E5-4558-956F-3C340C435A97",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2212:-:*:*:*:*:*:*:*",
"matchCriteriaId": "38D2B0D8-AD5E-4C19-8AA7-37B471342BA3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2212-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9C21D360-CDAC-4819-BA77-F9D983EF3061",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2214:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A95D941B-95C8-461B-8E96-0B6EC3A46AA9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2214-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EA635CC7-6596-443F-B2BA-4526F331A92B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2240:-:*:*:*:*:*:*:*",
"matchCriteriaId": "94F2BAE6-8A3C-4A1B-871A-3EF069C643C4",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2240-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "22E3C7AC-0BCC-41F1-9B4B-43CC6F6E2609",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2242:-:*:*:*:*:*:*:*",
"matchCriteriaId": "340A9411-F756-493C-8F95-7218C3F8548E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2242-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D455F5E7-CE0C-486E-8EFF-F6003D0F2EE1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2260:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B7FE3E7C-F4A3-46EC-B823-2D2B9E0EDF37",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2260-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C160F9D0-AEC4-4FD1-B520-424E016E6761",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2262:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BD47951B-A792-48E4-A8B1-D19616177FA4",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2262-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4611357D-1FEC-4BB0-A8A6-2BA8E6498C06",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
},
{
"lang": "es",
"value": "Dispositivos Moxa ioLogik E2200 en versiones anteriores 3.12 e ioAdmin Configuration Utility en versiones anteriores a 3.18 no cifran correctamente los datos, lo que facilita a atacantes remotos obtener el texto plano asociado a trav\u00e9s de vectores no especificados."
}
],
"id": "CVE-2016-2283",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": true,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary"
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-03-04T15:59:03.343",
"references": [
{
"source": "ics-cert@hq.dhs.gov",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-255"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2016-2282
Vulnerability from fkie_nvd - Published: 2016-03-04 15:59 - Updated: 2025-04-12 10:46
Severity ?
Summary
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
References
| URL | Tags | ||
|---|---|---|---|
| ics-cert@hq.dhs.gov | https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01 | Third Party Advisory, US Government Resource | |
| af854a3a-2127-422b-91ae-364da2661108 | https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01 | Third Party Advisory, US Government Resource |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| moxa | ioadmin_firmware | * | |
| moxa | iologik_firmware | * | |
| moxa | iologik_e2210 | - | |
| moxa | iologik_e2210-t | - | |
| moxa | iologik_e2212 | - | |
| moxa | iologik_e2212-t | - | |
| moxa | iologik_e2214 | - | |
| moxa | iologik_e2214-t | - | |
| moxa | iologik_e2240 | - | |
| moxa | iologik_e2240-t | - | |
| moxa | iologik_e2242 | - | |
| moxa | iologik_e2242-t | - | |
| moxa | iologik_e2260 | - | |
| moxa | iologik_e2260-t | - | |
| moxa | iologik_e2262 | - | |
| moxa | iologik_e2262-t | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:moxa:ioadmin_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "83193E46-EC52-400F-A426-17E710048BA5",
"versionEndIncluding": "3.17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:moxa:iologik_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3285A152-0075-4B61-BE61-60C5E92E8E54",
"versionEndIncluding": "3.11",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:moxa:iologik_e2210:-:*:*:*:*:*:*:*",
"matchCriteriaId": "861285B9-D63C-42A7-B694-A6F68DF5489B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2210-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "93099C60-C5E5-4558-956F-3C340C435A97",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2212:-:*:*:*:*:*:*:*",
"matchCriteriaId": "38D2B0D8-AD5E-4C19-8AA7-37B471342BA3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2212-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9C21D360-CDAC-4819-BA77-F9D983EF3061",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2214:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A95D941B-95C8-461B-8E96-0B6EC3A46AA9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2214-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EA635CC7-6596-443F-B2BA-4526F331A92B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2240:-:*:*:*:*:*:*:*",
"matchCriteriaId": "94F2BAE6-8A3C-4A1B-871A-3EF069C643C4",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2240-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "22E3C7AC-0BCC-41F1-9B4B-43CC6F6E2609",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2242:-:*:*:*:*:*:*:*",
"matchCriteriaId": "340A9411-F756-493C-8F95-7218C3F8548E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2242-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D455F5E7-CE0C-486E-8EFF-F6003D0F2EE1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2260:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B7FE3E7C-F4A3-46EC-B823-2D2B9E0EDF37",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2260-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C160F9D0-AEC4-4FD1-B520-424E016E6761",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2262:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BD47951B-A792-48E4-A8B1-D19616177FA4",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:moxa:iologik_e2262-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4611357D-1FEC-4BB0-A8A6-2BA8E6498C06",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
},
{
"lang": "es",
"value": "Dispositivos Moxa ioLogik E2200 en versiones anteriores 3.12 e ioAdmin Configuration Utility en versiones anteriores a 3.18 no cifran correctamente las credenciales, lo que facilita a atacantes remotos obtener el texto plano asociado a trav\u00e9s de vectores no especificados."
}
],
"id": "CVE-2016-2282",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": true,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary"
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-03-04T15:59:02.407",
"references": [
{
"source": "ics-cert@hq.dhs.gov",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-255"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2016-2283 (GCVE-0-2016-2283)
Vulnerability from cvelistv5 – Published: 2016-03-04 15:00 – Updated: 2024-08-05 23:24
VLAI?
Summary
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T23:24:48.853Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-03-03T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-03-04T15:57:02",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2016-2283",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2016-2283",
"datePublished": "2016-03-04T15:00:00",
"dateReserved": "2016-02-09T00:00:00",
"dateUpdated": "2024-08-05T23:24:48.853Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2016-2282 (GCVE-0-2016-2282)
Vulnerability from cvelistv5 – Published: 2016-03-04 15:00 – Updated: 2024-08-05 23:24
VLAI?
Summary
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T23:24:48.900Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-03-03T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-03-04T15:57:02",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2016-2282",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2016-2282",
"datePublished": "2016-03-04T15:00:00",
"dateReserved": "2016-02-09T00:00:00",
"dateUpdated": "2024-08-05T23:24:48.900Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2016-2283 (GCVE-0-2016-2283)
Vulnerability from nvd – Published: 2016-03-04 15:00 – Updated: 2024-08-05 23:24
VLAI?
Summary
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T23:24:48.853Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-03-03T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-03-04T15:57:02",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2016-2283",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2016-2283",
"datePublished": "2016-03-04T15:00:00",
"dateReserved": "2016-02-09T00:00:00",
"dateUpdated": "2024-08-05T23:24:48.853Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2016-2282 (GCVE-0-2016-2282)
Vulnerability from nvd – Published: 2016-03-04 15:00 – Updated: 2024-08-05 23:24
VLAI?
Summary
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T23:24:48.900Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-03-03T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-03-04T15:57:02",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2016-2282",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2016-2282",
"datePublished": "2016-03-04T15:00:00",
"dateReserved": "2016-02-09T00:00:00",
"dateUpdated": "2024-08-05T23:24:48.900Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}