CVE-2019-18238 Information disclosure in Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower
Attackers can access administrative accounts by reading unencrypted configuration files in Moxa ioLogik devices and IOxpress utility.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-18238?
CVE-2019-18238 is a high-severity vulnerability in Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower, published on 26 Feb 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account.
Weakness: CWE-312
Which versions are affected by CVE-2019-18238?
It affects 20 products.
Products include Moxa Iologik 2512-Hspa-T Firmware, Moxa Iologik 2512-Hspa Firmware, Moxa Iologik 2512-T Firmware, Moxa Iologik 2512-Wl1-Eu-T Firmware, Moxa Iologik 2512-Wl1-Eu Firmware, Moxa Iologik 2512-Wl1-Jp-T Firmware and 14 more.
How do I fix CVE-2019-18238?
No fix has been published for CVE-2019-18238 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-18238 being exploited?
There is no known exploitation of CVE-2019-18238 in the wild and no public exploit code.
Other vulnerabilities in Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower
Sources
Also known as GHSA-9g94-m2hg-vj88.