CVE-2016-2282 Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext....
MediumCVSS 5.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Moxa ioadmin firmware | <= 3.17 | No fix listed |
| Moxa iologik firmware | <= 3.11 | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource