Login Request a demo
Medium severity · published Dec 23, 2023
CVE-2023-5962
A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
Iologik E1210 Firmware · Moxa
before 3.3 · source: NVD
IE
Iologik E1211 Firmware · Moxa
before 3.3 · source: NVD
IE
Iologik E1212 Firmware · Moxa
before 3.3 · source: NVD
IE
Iologik E1213 Firmware · Moxa
before 3.3 · source: NVD
IE
Iologik E1214 Firmware · Moxa
before 3.3 · source: NVD
IE
Iologik E1240 Firmware · Moxa
before 3.3 · source: NVD
IE
Iologik E1241 Firmware · Moxa
before 3.3 · source: NVD
IE
Iologik E1242 Firmware · Moxa
before 3.3 · source: NVD
IE
Iologik E1260 Firmware · Moxa
before 3.3 · source: NVD
IE
Iologik E1262 Firmware · Moxa
before 3.3 · source: NVD
Affected product
IE
Iologik E1210 Firmware
Moxa
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-5962
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-5962
Vendor Advisory
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-235250-iologik-e1200-series-web-server-vulnerability
More from Iologik E1210 Firmware
8.8
CVE-2023-5961
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior