Code injection

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account...

PT-2017-3800

Name of the Vulnerable Software and Affected Versions Moxa ioLogik 2542-HSPA versions 3.0 or lower Moxa Ioxpress Configuration Utility versions 2.3.0 or lower Description The issue is related to the use of an insecure cryptographic algorithm for storing and transmitting passwords in the Moxa...

PT-2017-3801

Name of the Vulnerable Software and Affected Versions Moxa ioLogik 2542-HSPA versions 3.0 or lower Moxa ioLogik 2500 series firmware versions 3.0 or lower Moxa Ioxpress Configuration Utility versions 2.3.0 or lower Description The issue is related to the use of the HTTP protocol by default for...

PT-2017-3802

Name of the Vulnerable Software and Affected Versions Moxa ioLogik 2500 series firmware versions 3.0 or lower Moxa IOxpress configuration utility versions 2.3.0 or lower Description The issue is related to an uncontrolled resource consumption in the firmware of Moxa ioLogik 2542-HSPA modules and...