CVE-2023-5962

ioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability

Severity Score

6.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization.

Se ha identificado una vulnerabilidad de algoritmo criptográfico débil en las versiones de firmware de la serie ioLogik E1200 v3.3 y anteriores. Esta vulnerabilidad puede ayudar a un atacante a comprometer la confidencialidad de datos confidenciales. Esta vulnerabilidad puede llevar a un atacante a obtener una autorización inesperada.

*Credits: Reza Rashidi from HADESS

CVSS Scores

NISTv3.1 6.5

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2023-11-06 CVE Reserved
2023-12-23 CVE Published
2024-10-28 CVE Updated
2024-11-22 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CWE-328: Use of Weak Hash

CAPEC

CAPEC-20: Encryption Brute Forcing

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-235250-iologik-e1200-series-web-server-vulnerability	2024-01-03

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Moxa Search vendor "Moxa"	Iologik E1210 Firmware Search vendor "Moxa" for product "Iologik E1210 Firmware"	< 3.3 Search vendor "Moxa" for product "Iologik E1210 Firmware" and version " < 3.3"	-	Affected	in	Moxa Search vendor "Moxa"	Iologik E1210 Search vendor "Moxa" for product "Iologik E1210"	-	-	Safe
Moxa Search vendor "Moxa"	Iologik E1211 Firmware Search vendor "Moxa" for product "Iologik E1211 Firmware"	< 3.3 Search vendor "Moxa" for product "Iologik E1211 Firmware" and version " < 3.3"	-	Affected	in	Moxa Search vendor "Moxa"	Iologik E1211 Search vendor "Moxa" for product "Iologik E1211"	-	-	Safe
Moxa Search vendor "Moxa"	Iologik E1212 Firmware Search vendor "Moxa" for product "Iologik E1212 Firmware"	< 3.3 Search vendor "Moxa" for product "Iologik E1212 Firmware" and version " < 3.3"	-	Affected	in	Moxa Search vendor "Moxa"	Iologik E1212 Search vendor "Moxa" for product "Iologik E1212"	-	-	Safe
Moxa Search vendor "Moxa"	Iologik E1213 Firmware Search vendor "Moxa" for product "Iologik E1213 Firmware"	< 3.3 Search vendor "Moxa" for product "Iologik E1213 Firmware" and version " < 3.3"	-	Affected	in	Moxa Search vendor "Moxa"	Iologik E1213 Search vendor "Moxa" for product "Iologik E1213"	-	-	Safe
Moxa Search vendor "Moxa"	Iologik E1214 Firmware Search vendor "Moxa" for product "Iologik E1214 Firmware"	< 3.3 Search vendor "Moxa" for product "Iologik E1214 Firmware" and version " < 3.3"	-	Affected	in	Moxa Search vendor "Moxa"	Iologik E1214 Search vendor "Moxa" for product "Iologik E1214"	-	-	Safe
Moxa Search vendor "Moxa"	Iologik E1240 Firmware Search vendor "Moxa" for product "Iologik E1240 Firmware"	< 3.3 Search vendor "Moxa" for product "Iologik E1240 Firmware" and version " < 3.3"	-	Affected	in	Moxa Search vendor "Moxa"	Iologik E1240 Search vendor "Moxa" for product "Iologik E1240"	-	-	Safe
Moxa Search vendor "Moxa"	Iologik E1241 Firmware Search vendor "Moxa" for product "Iologik E1241 Firmware"	< 3.3 Search vendor "Moxa" for product "Iologik E1241 Firmware" and version " < 3.3"	-	Affected	in	Moxa Search vendor "Moxa"	Iologik E1241 Search vendor "Moxa" for product "Iologik E1241"	-	-	Safe
Moxa Search vendor "Moxa"	Iologik E1242 Firmware Search vendor "Moxa" for product "Iologik E1242 Firmware"	< 3.3 Search vendor "Moxa" for product "Iologik E1242 Firmware" and version " < 3.3"	-	Affected	in	Moxa Search vendor "Moxa"	Iologik E1242 Search vendor "Moxa" for product "Iologik E1242"	-	-	Safe
Moxa Search vendor "Moxa"	Iologik E1260 Firmware Search vendor "Moxa" for product "Iologik E1260 Firmware"	< 3.3 Search vendor "Moxa" for product "Iologik E1260 Firmware" and version " < 3.3"	-	Affected	in	Moxa Search vendor "Moxa"	Iologik E1260 Search vendor "Moxa" for product "Iologik E1260"	-	-	Safe
Moxa Search vendor "Moxa"	Iologik E1262 Firmware Search vendor "Moxa" for product "Iologik E1262 Firmware"	< 3.3 Search vendor "Moxa" for product "Iologik E1262 Firmware" and version " < 3.3"	-	Affected	in	Moxa Search vendor "Moxa"	Iologik E1262 Search vendor "Moxa" for product "Iologik E1262"	-	-	Safe