CVE-2019-18238
Summary
| CVE | CVE-2019-18238 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-02-26 22:15:00 UTC |
| Updated | 2022-01-01 17:40:00 UTC |
| Description | In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account. |
Risk And Classification
Problem Types: CWE-312
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Moxa | Iologik 2512 | - | All | All | All |
| Hardware | Moxa | Iologik 2512 | - | All | All | All |
| Hardware | Moxa | Iologik 2512-hspa | - | All | All | All |
| Hardware | Moxa | Iologik 2512-hspa | - | All | All | All |
| Hardware | Moxa | Iologik 2512-hspa-t | - | All | All | All |
| Hardware | Moxa | Iologik 2512-hspa-t | - | All | All | All |
| Operating System | Moxa | Iologik 2512-hspa-t Firmware | All | All | All | All |
| Operating System | Moxa | Iologik 2512-hspa Firmware | All | All | All | All |
| Hardware | Moxa | Iologik 2512-t | - | All | All | All |
| Hardware | Moxa | Iologik 2512-t | - | All | All | All |
| Operating System | Moxa | Iologik 2512-t Firmware | All | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-eu | - | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-eu | - | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-eu-t | - | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-eu-t | - | All | All | All |
| Operating System | Moxa | Iologik 2512-wl1-eu-t Firmware | All | All | All | All |
| Operating System | Moxa | Iologik 2512-wl1-eu Firmware | All | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-jp | - | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-jp | - | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-jp-t | - | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-jp-t | - | All | All | All |
| Operating System | Moxa | Iologik 2512-wl1-jp-t Firmware | All | All | All | All |
| Operating System | Moxa | Iologik 2512-wl1-jp Firmware | All | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-us | - | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-us | - | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-us-t | - | All | All | All |
| Hardware | Moxa | Iologik 2512-wl1-us-t | - | All | All | All |
| Operating System | Moxa | Iologik 2512-wl1-us-t Firmware | All | All | All | All |
| Operating System | Moxa | Iologik 2512-wl1-us Firmware | All | All | All | All |
| Operating System | Moxa | Iologik 2512 Firmware | All | All | All | All |
| Hardware | Moxa | Iologik 2542 | - | All | All | All |
| Hardware | Moxa | Iologik 2542 | - | All | All | All |
| Hardware | Moxa | Iologik 2542-hspa | - | All | All | All |
| Hardware | Moxa | Iologik 2542-hspa | - | All | All | All |
| Hardware | Moxa | Iologik 2542-hspa-t | - | All | All | All |
| Hardware | Moxa | Iologik 2542-hspa-t | - | All | All | All |
| Operating System | Moxa | Iologik 2542-hspa-t Firmware | All | All | All | All |
| Operating System | Moxa | Iologik 2542-hspa Firmware | All | All | All | All |
| Hardware | Moxa | Iologik 2542-t | - | All | All | All |
| Hardware | Moxa | Iologik 2542-t | - | All | All | All |
| Operating System | Moxa | Iologik 2542-t Firmware | All | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-eu | - | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-eu | - | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-eu-t | - | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-eu-t | - | All | All | All |
| Operating System | Moxa | Iologik 2542-wl1-eu-t Firmware | All | All | All | All |
| Operating System | Moxa | Iologik 2542-wl1-eu Firmware | All | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-jp | - | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-jp | - | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-jp-t | - | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-jp-t | - | All | All | All |
| Operating System | Moxa | Iologik 2542-wl1-jp-t Firmware | All | All | All | All |
| Operating System | Moxa | Iologik 2542-wl1-jp Firmware | All | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-us | - | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-us | - | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-us-t | - | All | All | All |
| Hardware | Moxa | Iologik 2542-wl1-us-t | - | All | All | All |
| Operating System | Moxa | Iologik 2542-wl1-us-t Firmware | All | All | All | All |
| Operating System | Moxa | Iologik 2542-wl1-us Firmware | All | All | All | All |
| Operating System | Moxa | Iologik 2542 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility | CISA | MISC | www.us-cert.gov | Third Party Advisory, US Government Resource |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.