CVE-2019-18238

State: Published
Severity: Not scored
Published: Feb 26, 2020
Updated: Aug 5, 2024
Reserved: Oct 22, 2019

Description

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account.

Scores

The record has no CVSS score.

Weaknesses

CWE-312 CLEARTEXT STORAGE OF SENSITIVE INFORMATION CWE-312

Affected Products

Product	Versions
Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lowern/a	Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lowerAffected

References

https://www.us-cert.gov/ics/advisories/icsa-20-056-02

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.