CVE-2016-2283

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.

Score

CVSS 3.0 5.3 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2016-03-04

Last modified

2024-08-05

Weaknesses

CWE-255

Affected products

• Ioadmin Firmware (Moxa)
• Iologik Firmware (Moxa)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01