First published: Tue Mar 24 2020(Updated: )
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to fail.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Moxa Iologik 2512 Firmware | <=3.0 | |
Moxa Iologik 2512 | ||
Moxa Iologik 2512-t Firmware | <=3.0 | |
Moxa Iologik 2512-t | ||
Moxa Iologik 2512-hspa Firmware | <=3.0 | |
Moxa Iologik 2512-hspa | ||
Moxa Iologik 2512-hspa-t Firmware | <=3.0 | |
Moxa Iologik 2512-hspa-t | ||
Moxa Iologik 2512-wl1-eu Firmware | <=3.0 | |
Moxa Iologik 2512-wl1-eu | ||
Moxa Iologik 2512-wl1-eu-t Firmware | <=3.0 | |
Moxa Iologik 2512-wl1-eu-t | ||
Moxa Iologik 2512-wl1-us Firmware | <=3.0 | |
Moxa Iologik 2512-wl1-us | ||
Moxa Iologik 2512-wl1-us-t Firmware | <=3.0 | |
Moxa Iologik 2512-wl1-us-t | ||
Moxa Iologik 2512-wl1-jp Firmware | <=3.0 | |
Moxa Iologik 2512-wl1-jp | ||
Moxa Iologik 2512-wl1-jp-t Firmware | <=3.0 | |
Moxa Iologik 2512-wl1-jp-t | ||
Moxa Iologik 2542 Firmware | <=3.0 | |
Moxa Iologik 2542 | ||
Moxa Iologik 2542-t Firmware | <=3.0 | |
Moxa Iologik 2542-t | ||
Moxa Iologik 2542-hspa Firmware | <=3.0 | |
Moxa Iologik 2542-hspa | ||
Moxa Iologik 2542-hspa-t Firmware | <=3.0 | |
Moxa Iologik 2542-hspa-t | ||
Moxa Iologik 2542-wl1-eu Firmware | <=3.0 | |
Moxa Iologik 2542-wl1-eu | ||
Moxa Iologik 2542-wl1-eu-t Firmware | <=3.0 | |
Moxa Iologik 2542-wl1-eu-t | ||
Moxa Iologik 2542-wl1-us Firmware | <=3.0 | |
Moxa Iologik 2542-wl1-us | ||
Moxa Iologik 2542-wl1-us-t Firmware | <=3.0 | |
Moxa Iologik 2542-wl1-us-t | ||
Moxa Iologik 2542-wl1-jp Firmware | <=3.0 | |
Moxa Iologik 2542-wl1-jp | ||
Moxa Iologik 2542-wl1-jp-t Firmware | <=3.0 | |
Moxa Iologik 2542-wl1-jp-t |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2019-18242 is classified as medium due to potential denial of service conditions.
To fix CVE-2019-18242, upgrade the affected Moxa ioLogik 2500 series firmware to a version higher than 3.0.
CVE-2019-18242 affects Moxa ioLogik 2500 series firmware versions 3.0 or lower.
Exploitation of CVE-2019-18242 can lead to web server failure due to handling multiple short-term requests.
There are no documented workarounds for CVE-2019-18242; updating the firmware is the recommended approach.