cbcvebase.
CVE-2020-7003
published 2020-03-24

CVE-2020-7003: In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted…

high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text.

Affected

20 ranges
VendorProductVersion rangeFixed in
moxaiologik_2512-hspa-t_firmware<= 3.0
moxaiologik_2512-hspa_firmware<= 3.0
moxaiologik_2512-t_firmware<= 3.0
moxaiologik_2512-wl1-eu-t_firmware<= 3.0
moxaiologik_2512-wl1-eu_firmware<= 3.0
moxaiologik_2512-wl1-jp-t_firmware<= 3.0
moxaiologik_2512-wl1-jp_firmware<= 3.0
moxaiologik_2512-wl1-us-t_firmware<= 3.0
moxaiologik_2512-wl1-us_firmware<= 3.0
moxaiologik_2512_firmware<= 3.0
moxaiologik_2542-hspa-t_firmware<= 3.0
moxaiologik_2542-hspa_firmware<= 3.0
moxaiologik_2542-t_firmware<= 3.0
moxaiologik_2542-wl1-eu-t_firmware<= 3.0
moxaiologik_2542-wl1-eu_firmware<= 3.0
moxaiologik_2542-wl1-jp-t_firmware<= 3.0
moxaiologik_2542-wl1-jp_firmware<= 3.0
moxaiologik_2542-wl1-us-t_firmware<= 3.0
moxaiologik_2542-wl1-us_firmware<= 3.0
moxaiologik_2542_firmware<= 3.0