CVE-2019-18242

moderate-risk
Published 2020-03-24

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to fail.

Do I need to act?

-
0.45% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (20)

Iologik 2512 Firmware
Iologik 2512-T Firmware
Iologik 2512-Hspa Firmware
Iologik 2512-Hspa-T Firmware
Iologik 2512-Wl1-Eu Firmware
Iologik 2512-Wl1-Eu-T Firmware
Iologik 2512-Wl1-Us Firmware
Iologik 2512-Wl1-Us-T Firmware
Iologik 2512-Wl1-Jp Firmware
Iologik 2512-Wl1-Jp-T Firmware
Iologik 2542 Firmware
Iologik 2542-T Firmware
Iologik 2542-Hspa Firmware
Iologik 2542-Hspa-T Firmware
Iologik 2542-Wl1-Eu Firmware
Iologik 2542-Wl1-Eu-T Firmware
Iologik 2542-Wl1-Us Firmware
Iologik 2542-Wl1-Us-T Firmware
Iologik 2542-Wl1-Jp Firmware
Iologik 2542-Wl1-Jp-T Firmware

Affected Vendors

Moxa

References (2)

Third Party Advisory https://www.us-cert.gov/ics/advisories/icsa-20-056-02
Third Party Advisory https://www.us-cert.gov/ics/advisories/icsa-20-056-02
48
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 2/34 · Minimal
Exposure 20/34 · Moderate