CVE-2016-8350

CVE-2016-8350 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Moxa ioLogik E1200 and E2200 series devices. The issue lies in the web application failing to verify that requests originate from a valid user, enabling remote attackers to perform unauthorized operations. Affected firmw...

CVE-2016-8372

CVE-2016-8372 affects Moxa ioLogik E1200/E2200 series devices with multiple firmware versions (as listed in the advisories). The root cause is Insufficiently Protected Credentials: a password is transmitted in a format that is not sufficiently secure. Impact, as described by ICS-CERT/NVD, include...

CVE-2016-8359

CVE-2016-8359 affects Moxa ioLogik E1200 series and E2200 series devices (various firmware versions prior to updated releases). The issue is Cross-site Scripting due to the web application not sanitizing user input, potentially allowing an attacker to inject script or execute arbitrary code. The ...

CVE-2016-8379

An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware...

CVE-2016-8372

An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware...

Moxa ioLogik E1200 Series Multiple Vulnerabilities

Moxa ioLogik E1200 Series are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

Moxa ioLogik Devices Detection (HTTP)

This script performs HTTP based detection of Moxa ioLogik devices. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cross-Site Request Forgery Vulnerability in Multiple Moxa Products

Moxa ioLogik E1210 and others are Moxa's remote Ethernet I/O products that provide bridge monitoring. A cross-site request forgery vulnerability exists in multiple Moxa products. A remote attacker could exploit this vulnerability to perform unauthorized operations...

Cross-Site Scripting Vulnerability in Multiple Moxa Products

Moxa ioLogik E1210 and others are Moxa's remote Ethernet I/O products that provide bridge monitoring. A cross-site scripting vulnerability exists in multiple Moxa products. A remote attacker could exploit the vulnerability to inject script or execute arbitrary code...

Security Bypass Vulnerabilities in Multiple Moxa Products

Moxa ioLogik E1210 and others are Moxa's remote Ethernet I/O products that provide bridge monitoring. A security vulnerability exists in several Moxa products. A remote attacker could exploit the vulnerability to execute arbitrary code, modify parameters and settings, or reboot the device...

Moxa ioLogik E1200 Arbitrary Code Execution Vulnerability

The Moxa ioLogik E1200 is an intelligent Ethernet I/O product from Moxa. A security vulnerability exists in the Moxa ioLogik E1200 that can be exploited by an attacker to execute arbitrary script code on the browser of an unsuspecting user in the context of an affected site...

Moxa ioLogik E1200 Series Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-287-05 Moxa ioLogik E1200 Series Vulnerabilities that was published October 13, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 4 -------- Alexandru Ariciu of Applied Risk has identified...

Moxa ioLogik E2200 and ioAdmin Configuration Utility Information Disclosure Vulnerability (CNVD-2016-01475)

The Moxa ioLogik E2200 and the ioAdmin Configuration Utility are both products of Moxa. The former is an Ethernet RTU Remote Terminal Unit controller and the latter is a software package for managing and configuring the ioLogik E2200. A security vulnerability exists in the Moxa ioLogik E2200...

Moxa ioLogik E2200 and ioAdmin Configuration Utility Information Disclosure Vulnerability

The Moxa ioLogik E2200 and the ioAdmin Configuration Utility are both products of Moxa. The former is an Ethernet RTU Remote Terminal Unit controller and the latter is a software package for managing and configuring the ioLogik E2200. A security vulnerability exists in the Moxa ioLogik E2200 prio...

CVE-2016-2283

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

CVE-2016-2283

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

CVE-2016-2282

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

CVE-2016-2282

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

Code injection

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

Code injection

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...