Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility Cleartext Transmission of Sensitive Information (CVE-2020-7003)

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...

Moxa ioLogik 2542-HSPA Remote Input/Output Plugin Information Disclosure

The vulnerability of the microprogrammed input/output module Moxa ioLogik 2542-HSPA and the Moxa Ioxpress Configuration Utility is related to the default use of the HTTP protocol during the implementation of the “Basic HTTP Authentication” method. Exploiting this vulnerability allows a malicious...

Moxa ioLogik Remote Input/Output Module Cryptographic Algorithm Unstable Unauthorized Access

The vulnerability of the microprogrammed input/output module Moxa ioLogik 2542-HSPA and the Moxa Ioxpress Configuration Utility lies in the use of a unstable cryptographic algorithm for storing and transmitting passwords. Exploiting this vulnerability allows an attacker operating remotely to gain...

PT-2017-3801

Name of the Vulnerable Software and Affected Versions Moxa ioLogik 2542-HSPA versions 3.0 or lower Moxa ioLogik 2500 series firmware versions 3.0 or lower Moxa Ioxpress Configuration Utility versions 2.3.0 or lower Description The issue is related to the use of the HTTP protocol by default for...

PT-2017-3800

Name of the Vulnerable Software and Affected Versions Moxa ioLogik 2542-HSPA versions 3.0 or lower Moxa Ioxpress Configuration Utility versions 2.3.0 or lower Description The issue is related to the use of an insecure cryptographic algorithm for storing and transmitting passwords in the Moxa...