Code injection

2016-03-0415:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.3%

JSON

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.

CPENameOperatorVersion
ioadmin_firmwarele3.17
iologik_firmwarele3.11

CPE	Name	Operator	Version
	ioadmin_firmware	le	3.17
	iologik_firmware	le	3.11

References

ics-cert.us-cert.gov/advisories/ICSA-16-063-01