Moxa Iologik 2542-WL1-Jp-T Firmware vulnerabilities

3 CVEs affecting Moxa Iologik 2542-WL1-Jp-T Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7003, published 2020-03-24.

More from Moxa.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-18242, published 2020-03-24. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to…
• CVE-2020-7003, published 2020-03-24. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text.
• CVE-2019-18238, published 2020-02-26. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption,…