CVE-2020-7003: High severity MOXA Iologik 2512 Firmware vulnerability
Published Mar 24, 2020
·Updated
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text.
Affected Software
80 affected components
MOXA Iologik 2512 Firmware<=3.0
MOXA Iologik 2512
MOXA Iologik 2512-t Firmware<=3.0
MOXA Iologik 2512-t
MOXA Iologik 2512-hspa Firmware<=3.0
MOXA Iologik 2512-hspa
MOXA Iologik 2512-hspa-t Firmware<=3.0
MOXA Iologik 2512-hspa-t
MOXA Iologik 2512-wl1-eu Firmware<=3.0
MOXA Iologik 2512-wl1-eu
MOXA Iologik 2512-wl1-eu-t Firmware<=3.0
MOXA Iologik 2512-wl1-eu-t
MOXA Iologik 2512-wl1-us Firmware<=3.0
MOXA Iologik 2512-wl1-us
MOXA Iologik 2512-wl1-us-t Firmware<=3.0
MOXA Iologik 2512-wl1-us-t
MOXA Iologik 2512-wl1-jp Firmware<=3.0
MOXA Iologik 2512-wl1-jp
MOXA Iologik 2512-wl1-jp-t Firmware<=3.0
MOXA Iologik 2512-wl1-jp-t
MOXA Iologik 2542 Firmware<=3.0
MOXA Iologik 2542
MOXA Iologik 2542-t Firmware<=3.0
MOXA Iologik 2542-t
MOXA Iologik 2542-hspa Firmware<=3.0
MOXA Iologik 2542-hspa
MOXA Iologik 2542-hspa-t Firmware<=3.0
MOXA Iologik 2542-hspa-t
MOXA Iologik 2542-wl1-eu Firmware<=3.0
MOXA Iologik 2542-wl1-eu
MOXA Iologik 2542-wl1-eu-t Firmware<=3.0
MOXA Iologik 2542-wl1-eu-t
MOXA Iologik 2542-wl1-us Firmware<=3.0
MOXA Iologik 2542-wl1-us
MOXA Iologik 2542-wl1-us-t Firmware<=3.0
MOXA Iologik 2542-wl1-us-t
MOXA Iologik 2542-wl1-jp Firmware<=3.0
MOXA Iologik 2542-wl1-jp
MOXA Iologik 2542-wl1-jp-t Firmware<=3.0
MOXA Iologik 2542-wl1-jp-t
All of the following
MOXA Iologik 2512 Firmware<=3.0
MOXA Iologik 2512
All of the following
MOXA Iologik 2512-t Firmware<=3.0
MOXA Iologik 2512-t
All of the following
MOXA Iologik 2512-hspa Firmware<=3.0
MOXA Iologik 2512-hspa
All of the following
MOXA Iologik 2512-hspa-t Firmware<=3.0
MOXA Iologik 2512-hspa-t
All of the following
MOXA Iologik 2512-wl1-eu Firmware<=3.0
MOXA Iologik 2512-wl1-eu
All of the following
MOXA Iologik 2512-wl1-eu-t Firmware<=3.0
MOXA Iologik 2512-wl1-eu-t
All of the following
MOXA Iologik 2512-wl1-us Firmware<=3.0
MOXA Iologik 2512-wl1-us
All of the following
MOXA Iologik 2512-wl1-us-t Firmware<=3.0
MOXA Iologik 2512-wl1-us-t
All of the following
MOXA Iologik 2512-wl1-jp Firmware<=3.0
MOXA Iologik 2512-wl1-jp
All of the following
MOXA Iologik 2512-wl1-jp-t Firmware<=3.0
MOXA Iologik 2512-wl1-jp-t
All of the following
MOXA Iologik 2542 Firmware<=3.0
MOXA Iologik 2542
All of the following
MOXA Iologik 2542-t Firmware<=3.0
MOXA Iologik 2542-t
All of the following
MOXA Iologik 2542-hspa Firmware<=3.0
MOXA Iologik 2542-hspa
All of the following
MOXA Iologik 2542-hspa-t Firmware<=3.0
MOXA Iologik 2542-hspa-t
All of the following
MOXA Iologik 2542-wl1-eu Firmware<=3.0
MOXA Iologik 2542-wl1-eu
All of the following
MOXA Iologik 2542-wl1-eu-t Firmware<=3.0
MOXA Iologik 2542-wl1-eu-t
All of the following
MOXA Iologik 2542-wl1-us Firmware<=3.0
MOXA Iologik 2542-wl1-us
All of the following
MOXA Iologik 2542-wl1-us-t Firmware<=3.0
MOXA Iologik 2542-wl1-us-t
All of the following
MOXA Iologik 2542-wl1-jp Firmware<=3.0
MOXA Iologik 2542-wl1-jp
All of the following
MOXA Iologik 2542-wl1-jp-t Firmware<=3.0
MOXA Iologik 2542-wl1-jp-t
Event History
Mar 24, 2020
CVE Published
via MITRE·05:02 PM
Data Sourced
via MITRE·05:02 PM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-7003?
CVE-2020-7003 has a severity rating classified as high due to the exposure of sensitive information transmitted in clear text.
2
How do I fix CVE-2020-7003?
To remediate CVE-2020-7003, upgrade the Moxa ioLogik 2500 series firmware to a version higher than 3.0.
3
Which devices are affected by CVE-2020-7003?
CVE-2020-7003 affects the Moxa ioLogik 2500 series firmware versions 3.0 or lower and the IOxpress configuration utility versions 2.3.0 or lower.
4
What type of data is compromised in CVE-2020-7003?
CVE-2020-7003 exposes sensitive information because it is transmitted over the web applications in clear text.
5
Are there any workarounds for CVE-2020-7003?
Currently, the only effective workaround for CVE-2020-7003 is to immediately update the firmware to the latest version.