CVE-2019-18238

🗓️ 26 Feb 2020 22:15:11Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 10 Views

Moxa ioLogik 2500 series firmware vulnerabilit

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the microprogrammed software of Moxa ioLogik 2542-HSPA remote input/output modules and the Moxa Ioxpress Configuration Utility, which involves storing critical information in the form of plain text, allows a perpetrator to intercept administrator credentials and other confidential information, thereby gaining access to the control system.	25 Sep 201900:00	–	bdu_fstec
CVE	CVE-2019-18238	26 Feb 202021:19	–	cve
Cvelist	CVE-2019-18238	26 Feb 202021:19	–	cvelist
EUVD	EUVD-2019-8037	7 Oct 202500:30	–	euvd
ICS	Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility	25 Feb 202000:00	–	ics
OSV	CVE-2019-18238	26 Feb 202022:15	–	osv
Prion	Code injection	26 Feb 202022:15	–	prion
RedhatCVE	CVE-2019-18238	9 Jan 202610:17	–	redhatcve
Tenable Nessus	Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility Cleartext Storage of Sensitive Information (CVE-2019-18238)	2 Aug 202300:00	–	nessus

NVD

Node

moxa iologik_2512_firmwareRange≤3.0

AND

moxa iologik_2512Match-

Node

moxa iologik_2512-t_firmwareRange≤3.0

AND

moxa iologik_2512-tMatch-

Node

moxa iologik_2512-hspa_firmwareRange≤3.0

AND

moxa iologik_2512-hspaMatch-

Node

moxa iologik_2512-hspa-t_firmwareRange≤3.0

AND

moxa iologik_2512-hspa-tMatch-

Node

moxa iologik_2512-wl1-eu_firmwareRange≤3.0

AND

moxa iologik_2512-wl1-euMatch-

Node

moxa iologik_2512-wl1-eu-t_firmwareRange≤3.0

AND

moxa iologik_2512-wl1-eu-tMatch-

Node

moxa iologik_2512-wl1-us_firmwareRange≤3.0

AND

moxa iologik_2512-wl1-usMatch-

Node

moxa iologik_2512-wl1-us-t_firmwareRange≤3.0

AND

moxa iologik_2512-wl1-us-tMatch-

Node

moxa iologik_2512-wl1-jp_firmwareRange≤3.0

AND

moxa iologik_2512-wl1-jpMatch-

Node

moxa iologik_2512-wl1-jp-t_firmwareRange≤3.0

AND

moxa iologik_2512-wl1-jp-tMatch-

Node

moxa iologik_2542_firmwareRange≤3.0

AND

moxa iologik_2542Match-

Node

moxa iologik_2542-t_firmwareRange≤3.0

AND

moxa iologik_2542-tMatch-

Node

moxa iologik_2542-hspa_firmwareRange≤3.0

AND

moxa iologik_2542-hspaMatch-

Node

moxa iologik_2542-hspa-t_firmwareRange≤3.0

AND

moxa iologik_2542-hspa-tMatch-

Node

moxa iologik_2542-wl1-eu_firmwareRange≤3.0

AND

moxa iologik_2542-wl1-euMatch-

Node

moxa iologik_2542-wl1-eu-t_firmwareRange≤3.0

AND

moxa iologik_2542-wl1-eu-tMatch-

Node

moxa iologik_2542-wl1-us_firmwareRange≤3.0

AND

moxa iologik_2542-wl1-usMatch-

Node

moxa iologik_2542-wl1-us-t_firmwareRange≤3.0

AND

moxa iologik_2542-wl1-us-tMatch-

Node

moxa iologik_2542-wl1-jp_firmwareRange≤3.0

AND

moxa iologik_2542-wl1-jpMatch-

Node

moxa iologik_2542-wl1-jp-t_firmwareRange≤3.0

AND

moxa iologik_2542-wl1-jp-tMatch-

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsa-20-056-02

21 Nov 2024 04:32Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.00145

moxa iologik firmware vulnerability configuration encryption administrative account cve-2019-18238