CVE-2023-5961: ioLogik E1200 Series: Cross-Site Request Forgery (CSRF) Vulnerability
First published: Sat Dec 23 2023(Updated: )
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. An attacker can exploit this vulnerability to trick a client into making an unintentional request to the web server, which will be treated as an authentic request. This vulnerability may lead an attacker to perform operations on behalf of the victimized user.
Credit: psirt@moxa.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Moxa Iologik E1210 Firmware | <3.3 | |
| Moxa ioLogik E1210 | ||
| All of | ||
| Moxa Iologik E1211 Firmware | <3.3 | |
| Moxa Iologik E1211 | ||
| All of | ||
| Moxa Iologik E1212 Firmware | <3.3 | |
| Moxa Iologik E1212 | ||
| All of | ||
| Moxa Iologik E1213 Firmware | <3.3 | |
| Moxa Iologik E1213 | ||
| All of | ||
| Moxa Iologik E1214 Firmware | <3.3 | |
| Moxa Iologik E1214 | ||
| All of | ||
| Moxa Iologik E1240 Firmware | <3.3 | |
| Moxa Iologik E1240 | ||
| All of | ||
| Moxa Iologik E1241 Firmware | <3.3 | |
| Moxa Iologik E1241 | ||
| All of | ||
| Moxa Iologik E1242 Firmware | <3.3 | |
| Moxa Iologik E1242 | ||
| All of | ||
| Moxa Iologik E1260 Firmware | <3.3 | |
| Moxa Iologik E1260 | ||
| All of | ||
| Moxa Iologik E1262 Firmware | <3.3 | |
| Moxa Iologik E1262 |
Remedy
Moxa has developed appropriate solutions to address the vulnerabilities. The solutions for affected products are shown below. * ioLogik E1200 Series : Please contact Moxa Technical Support for the security patch (v3.3.7). https://www.moxa.com/tw/support/technical-support
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/remedy
- agent/severity
- agent/title
- agent/weakness
- agent/author
- agent/references
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/description
- agent/epss
- collector/mitre-cve
- source/MITRE
- vendor/moxa
- canonical/moxa iologik e1210 firmware
- canonical/moxa iologik e1210
- canonical/moxa iologik e1211 firmware
- canonical/moxa iologik e1211
- canonical/moxa iologik e1212 firmware
- canonical/moxa iologik e1212
- canonical/moxa iologik e1213 firmware
- canonical/moxa iologik e1213
- canonical/moxa iologik e1214 firmware
- canonical/moxa iologik e1214
- canonical/moxa iologik e1240 firmware
- canonical/moxa iologik e1240
- canonical/moxa iologik e1241 firmware
- canonical/moxa iologik e1241
- canonical/moxa iologik e1242 firmware
- canonical/moxa iologik e1242
- canonical/moxa iologik e1260 firmware
- canonical/moxa iologik e1260
- canonical/moxa iologik e1262 firmware
- canonical/moxa iologik e1262