Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility

Summary

Vulnerabilities 3

• Unscored —
  CVE-2019-18238

  In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower,…

  Feb 26, 2020
• Unscored —
  CVE-2019-18242

  In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower,…

  Mar 24, 2020
• Unscored —
  CVE-2020-7003

  In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower,…

  Mar 24, 2020

Revision history

1. 2020-02-25 #1

   ICSA-20-056-02 Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration

References

• ICS Advisory ICSA-20-056-02 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-20-056-02
• Recommended Practices
  https://www.us-cert.gov/sites/default/files/publications/emailscams_0905.pdf
• Recommended Practices
  https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B