CVE-2016-2283 : Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.

Published 2016-03-04 15:59:03

Updated 2021-05-19 13:45:26

Source ICS-CERT

View at NVD, CVE.org

Products affected by CVE-2016-2283

Moxa » Ioadmin Firmware
Versions up to, including, (<=) 3.17
cpe:2.3:o:moxa:ioadmin_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Moxa » Iologik E2210 » Version: N/A
When used together with: Moxa » Iologik E2210-t » Version: N/A
When used together with: Moxa » Iologik E2212 » Version: N/A
When used together with: Moxa » Iologik E2212-t » Version: N/A
When used together with: Moxa » Iologik E2214 » Version: N/A
When used together with: Moxa » Iologik E2214-t » Version: N/A
When used together with: Moxa » Iologik E2240 » Version: N/A
When used together with: Moxa » Iologik E2240-t » Version: N/A
When used together with: Moxa » Iologik E2242 » Version: N/A
When used together with: Moxa » Iologik E2242-t » Version: N/A
When used together with: Moxa » Iologik E2260 » Version: N/A
When used together with: Moxa » Iologik E2260-t » Version: N/A
When used together with: Moxa » Iologik E2262 » Version: N/A
When used together with: Moxa » Iologik E2262-t » Version: N/A
Moxa » Iologik Firmware
Versions up to, including, (<=) 3.11
cpe:2.3:o:moxa:iologik_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Moxa » Iologik E2210 » Version: N/A
When used together with: Moxa » Iologik E2210-t » Version: N/A
When used together with: Moxa » Iologik E2212 » Version: N/A
When used together with: Moxa » Iologik E2212-t » Version: N/A
When used together with: Moxa » Iologik E2214 » Version: N/A
When used together with: Moxa » Iologik E2214-t » Version: N/A
When used together with: Moxa » Iologik E2240 » Version: N/A
When used together with: Moxa » Iologik E2240-t » Version: N/A
When used together with: Moxa » Iologik E2242 » Version: N/A
When used together with: Moxa » Iologik E2242-t » Version: N/A
When used together with: Moxa » Iologik E2260 » Version: N/A
When used together with: Moxa » Iologik E2260-t » Version: N/A
When used together with: Moxa » Iologik E2262 » Version: N/A
When used together with: Moxa » Iologik E2262-t » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2016-2283

EPSS FAQ

0.19%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 56 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-2283

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2016-2283

CWE-255

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-2283

https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01

Moxa ioLogik E2200 Series Weak Authentication Practices | CISA
Third Party Advisory;US Government Resource

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2016-2283

Products affected by CVE-2016-2283

Exploit prediction scoring system (EPSS) score for CVE-2016-2283

CVSS scores for CVE-2016-2283

CWE ids for CVE-2016-2283

References for CVE-2016-2283