« Volver al listado

CVE-2016-2283

Estado: ModificadaMedia (5.3)—

Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Moxa — Ioadmin FirmwareMoxa — Iologik Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-2283",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-03-04T15:59:03.343",
  "references": [
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-063-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Dispositivos Moxa ioLogik E2200 en versiones anteriores 3.12 e ioAdmin Configuration Utility en versiones anteriores a 3.18 no cifran correctamente los datos, lo que facilita a atacantes remotos obtener el texto plano asociado a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:43:45.263",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:moxa:ioadmin_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83193E46-EC52-400F-A426-17E710048BA5",
              "versionEndIncluding": "3.17"
            },
            {
              "criteria": "cpe:2.3:o:moxa:iologik_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3285A152-0075-4B61-BE61-60C5E92E8E54",
              "versionEndIncluding": "3.11"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2210:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "861285B9-D63C-42A7-B694-A6F68DF5489B"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2210-t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "93099C60-C5E5-4558-956F-3C340C435A97"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2212:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "38D2B0D8-AD5E-4C19-8AA7-37B471342BA3"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2212-t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9C21D360-CDAC-4819-BA77-F9D983EF3061"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2214:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A95D941B-95C8-461B-8E96-0B6EC3A46AA9"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2214-t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EA635CC7-6596-443F-B2BA-4526F331A92B"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2240:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "94F2BAE6-8A3C-4A1B-871A-3EF069C643C4"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2240-t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "22E3C7AC-0BCC-41F1-9B4B-43CC6F6E2609"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2242:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "340A9411-F756-493C-8F95-7218C3F8548E"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2242-t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D455F5E7-CE0C-486E-8EFF-F6003D0F2EE1"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2260:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B7FE3E7C-F4A3-46EC-B823-2D2B9E0EDF37"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2260-t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C160F9D0-AEC4-4FD1-B520-424E016E6761"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2262:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BD47951B-A792-48E4-A8B1-D19616177FA4"
            },
            {
              "criteria": "cpe:2.3:h:moxa:iologik_e2262-t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4611357D-1FEC-4BB0-A8A6-2BA8E6498C06"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}