CVE-2019-18242 Denial of service in Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower

High 7.5 Published 24 Mar 2020 Updated 5 Aug 2024

Attackers can cause the web server to fail by sending frequent requests, disrupting operations in Moxa industrial I/O devices.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-18242?

CVE-2019-18242 is a high-severity denial of service vulnerability in Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower, published on 24 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to fail.

Weakness: CWE-941

Which versions are affected by CVE-2019-18242?

It affects 20 products.

Products include Moxa Iologik 2512-Hspa-T Firmware, Moxa Iologik 2512-Hspa Firmware, Moxa Iologik 2512-T Firmware, Moxa Iologik 2512-Wl1-Eu-T Firmware, Moxa Iologik 2512-Wl1-Eu Firmware, Moxa Iologik 2512-Wl1-Jp-T Firmware and 14 more.

How do I fix CVE-2019-18242?

No fix has been published for CVE-2019-18242 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2019-18242 being exploited?

There is no known exploitation of CVE-2019-18242 in the wild and no public exploit code.

Sources

Also known as GHSA-m55h-2h99-7g5h.