CVE-2016-2283 Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via uns...
MediumCVSS 5.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Moxa ioadmin firmware | <= 3.17 | No fix listed |
| Moxa iologik firmware | <= 3.11 | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource