CVE-2023-4227
ioLogik 4000 Series: Existence of an Unauthorized Service
- State
- Published
- Severity
- 5.3 Medium
- Published
- Aug 24, 2023
- Updated
- Oct 28, 2024
- Reserved
- Aug 8, 2023
Description
A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which can be exploited by malicious actors to potentially gain unauthorized access to the product. This could lead to security breaches, data theft, and unauthorized manipulation of sensitive information. The vulnerability is attributed to the presence of an unauthorized service, which could potentially enable unauthorized access to the. device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | Moxa |
Weaknesses
- CWE-489 Active Debug Code
Affected Products
| Product | Versions |
|---|---|
ioLogik 4000 SeriesMoxa |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.