Cross-Site Scripting Vulnerability in Multiple Moxa Products

Moxa ioLogik E1210 and others are Moxa's remote Ethernet I/O products that provide bridge monitoring. A cross-site scripting vulnerability exists in multiple Moxa products. A remote attacker could exploit the vulnerability to inject script or execute arbitrary code...

Cross-Site Request Forgery Vulnerability in Multiple Moxa Products

Moxa ioLogik E1210 and others are Moxa's remote Ethernet I/O products that provide bridge monitoring. A cross-site request forgery vulnerability exists in multiple Moxa products. A remote attacker could exploit this vulnerability to perform unauthorized operations...

Moxa ioLogik E1200 Arbitrary Code Execution Vulnerability

The Moxa ioLogik E1200 is an intelligent Ethernet I/O product from Moxa. A security vulnerability exists in the Moxa ioLogik E1200 that can be exploited by an attacker to execute arbitrary script code on the browser of an unsuspecting user in the context of an affected site...

Moxa ioLogik E1200 Series Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-287-05 Moxa ioLogik E1200 Series Vulnerabilities that was published October 13, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 4 -------- Alexandru Ariciu of Applied Risk has identified...

Moxa ioLogik E2200 and ioAdmin Configuration Utility Information Disclosure Vulnerability (CNVD-2016-01475)

The Moxa ioLogik E2200 and the ioAdmin Configuration Utility are both products of Moxa. The former is an Ethernet RTU Remote Terminal Unit controller and the latter is a software package for managing and configuring the ioLogik E2200. A security vulnerability exists in the Moxa ioLogik E2200...

Moxa ioLogik E2200 and ioAdmin Configuration Utility Information Disclosure Vulnerability

The Moxa ioLogik E2200 and the ioAdmin Configuration Utility are both products of Moxa. The former is an Ethernet RTU Remote Terminal Unit controller and the latter is a software package for managing and configuring the ioLogik E2200. A security vulnerability exists in the Moxa ioLogik E2200 prio...

CVE-2016-2283

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

CVE-2016-2283

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

CVE-2016-2282

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

CVE-2016-2282

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

Code injection

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

Code injection

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

CVE-2016-2282

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

CVE-2016-2282

CVE-2016-2282 affects Moxa ioLogik E2200 series (pre-3.12) and the ioAdmin Configuration Utility (pre-3.18). The root cause is insufficient encryption of credentials, allowing remote attackers to obtain cleartext via unspecified vectors. Exploits are publicly available per ICS-CERT and the adviso...

CVE-2016-2283

CVE-2016-2283 affects Moxa ioLogik E2200 series and ioAdmin Configuration Utility prior to 3.12/3.18, due to insufficient encryption that could let remote attackers obtain cleartext via unspecified vectors. Exploitation is described as remote with publicly available exploits; mitigations include ...

CVE-2016-2283

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

CVE-2016-2283: Undefined Security Weakness

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

CVE-2016-2282: Undefined Security Weakness

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...

PT-2016-5086

Name of the Vulnerable Software and Affected Versions Moxa ioLogik E2200 versions prior to 3.12 Moxa ioAdmin Configuration Utility versions prior to 3.18 Description The issue is related to the improper encryption of credentials, making it easier for remote attackers to obtain the associated...

PT-2016-5087

Name of the Vulnerable Software and Affected Versions Moxa ioLogik E2200 versions prior to 3.12 Moxa ioAdmin Configuration Utility versions prior to 3.18 Description The issue concerns the improper encryption of data, making it easier for remote attackers to obtain the associated cleartext via...