445
VMScore

CVE-2019-18238

Published: 26/02/2020 Updated: 01/01/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an malicious user to access an administrative account.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

moxa iologik_2512_firmware

moxa iologik_2512-t_firmware

moxa iologik_2512-hspa_firmware

moxa iologik_2512-hspa-t_firmware

moxa iologik_2512-wl1-eu_firmware

moxa iologik_2512-wl1-eu-t_firmware

moxa iologik_2512-wl1-us_firmware

moxa iologik_2512-wl1-us-t_firmware

moxa iologik_2512-wl1-jp_firmware

moxa iologik_2512-wl1-jp-t_firmware

moxa iologik_2542_firmware

moxa iologik_2542-t_firmware

moxa iologik_2542-hspa_firmware

moxa iologik_2542-hspa-t_firmware

moxa iologik_2542-wl1-eu_firmware

moxa iologik_2542-wl1-eu-t_firmware

moxa iologik_2542-wl1-us_firmware

moxa iologik_2542-wl1-us-t_firmware

moxa iologik_2542-wl1-jp_firmware

moxa iologik_2542-wl1-jp-t_firmware