CVE-2016-2282
Summary
| CVE | CVE-2016-2282 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-03-04 15:59:00 UTC |
| Updated | 2021-05-19 13:45:00 UTC |
| Description | Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors. |
Risk And Classification
Problem Types: CWE-255
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Moxa | Ioadmin Firmware | All | All | All | All |
| Hardware | Moxa | Iologic E2210 | - | All | All | All |
| Hardware | Moxa | Iologic E2210 | - | All | All | All |
| Hardware | Moxa | Iologic E2210-t | - | All | All | All |
| Hardware | Moxa | Iologic E2210-t | - | All | All | All |
| Hardware | Moxa | Iologic E2212 | - | All | All | All |
| Hardware | Moxa | Iologic E2212 | - | All | All | All |
| Hardware | Moxa | Iologic E2212-t | - | All | All | All |
| Hardware | Moxa | Iologic E2212-t | - | All | All | All |
| Hardware | Moxa | Iologic E2214 | - | All | All | All |
| Hardware | Moxa | Iologic E2214 | - | All | All | All |
| Hardware | Moxa | Iologic E2214-t | - | All | All | All |
| Hardware | Moxa | Iologic E2214-t | - | All | All | All |
| Hardware | Moxa | Iologic E2240 | - | All | All | All |
| Hardware | Moxa | Iologic E2240 | - | All | All | All |
| Hardware | Moxa | Iologic E2240-t | - | All | All | All |
| Hardware | Moxa | Iologic E2240-t | - | All | All | All |
| Hardware | Moxa | Iologic E2242 | - | All | All | All |
| Hardware | Moxa | Iologic E2242 | - | All | All | All |
| Hardware | Moxa | Iologic E2242-t | - | All | All | All |
| Hardware | Moxa | Iologic E2242-t | - | All | All | All |
| Hardware | Moxa | Iologic E2260 | - | All | All | All |
| Hardware | Moxa | Iologic E2260 | - | All | All | All |
| Hardware | Moxa | Iologic E2260-t | - | All | All | All |
| Hardware | Moxa | Iologic E2260-t | - | All | All | All |
| Hardware | Moxa | Iologic E2262 | - | All | All | All |
| Hardware | Moxa | Iologic E2262 | - | All | All | All |
| Hardware | Moxa | Iologic E2262-t | - | All | All | All |
| Hardware | Moxa | Iologic E2262-t | - | All | All | All |
| Hardware | Moxa | Iologik E2210 | - | All | All | All |
| Hardware | Moxa | Iologik E2210-t | - | All | All | All |
| Hardware | Moxa | Iologik E2212 | - | All | All | All |
| Hardware | Moxa | Iologik E2212-t | - | All | All | All |
| Hardware | Moxa | Iologik E2214 | - | All | All | All |
| Hardware | Moxa | Iologik E2214-t | - | All | All | All |
| Hardware | Moxa | Iologik E2240 | - | All | All | All |
| Hardware | Moxa | Iologik E2240-t | - | All | All | All |
| Hardware | Moxa | Iologik E2242 | - | All | All | All |
| Hardware | Moxa | Iologik E2242-t | - | All | All | All |
| Hardware | Moxa | Iologik E2260 | - | All | All | All |
| Hardware | Moxa | Iologik E2260-t | - | All | All | All |
| Hardware | Moxa | Iologik E2262 | - | All | All | All |
| Hardware | Moxa | Iologik E2262-t | - | All | All | All |
| Operating System | Moxa | Iologik Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Moxa ioLogik E2200 Series Weak Authentication Practices | ICS-CERT | MISC | ics-cert.us-cert.gov | Third Party Advisory, US Government Resource |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.