CVE-2020-7003

HIGH

Moxa ioLogik 2500 Series Firmware < 3.0 - Cleartext Transmission of Sensitive Information

Title source: llm
STIX 2.1

Description

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.us-cert.gov/ics/advisories/icsa-20-056-02

Scores

CVSS v3 7.5
EPSS 0.0020
EPSS Percentile 41.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-319
Status published
Products (20)
moxa/iologik_2512-hspa-t_firmware < 3.0
moxa/iologik_2512-hspa_firmware < 3.0
moxa/iologik_2512-t_firmware < 3.0
moxa/iologik_2512-wl1-eu-t_firmware < 3.0
moxa/iologik_2512-wl1-eu_firmware < 3.0
moxa/iologik_2512-wl1-jp-t_firmware < 3.0
moxa/iologik_2512-wl1-jp_firmware < 3.0
moxa/iologik_2512-wl1-us-t_firmware < 3.0
moxa/iologik_2512-wl1-us_firmware < 3.0
moxa/iologik_2512_firmware < 3.0
... and 10 more
Published Mar 24, 2020
Tracked Since Feb 18, 2026