CVE-2020-7003

EUVD-2020-28143
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Affected Products (NVD)
VendorProductVersion
moxaiologik_2512_firmware
𝑥
≤ 3.0
moxaiologik_2512-t_firmware
𝑥
≤ 3.0
moxaiologik_2512-hspa_firmware
𝑥
≤ 3.0
moxaiologik_2512-hspa-t_firmware
𝑥
≤ 3.0
moxaiologik_2512-wl1-eu_firmware
𝑥
≤ 3.0
moxaiologik_2512-wl1-eu-t_firmware
𝑥
≤ 3.0
moxaiologik_2512-wl1-us_firmware
𝑥
≤ 3.0
moxaiologik_2512-wl1-us-t_firmware
𝑥
≤ 3.0
moxaiologik_2512-wl1-jp_firmware
𝑥
≤ 3.0
moxaiologik_2512-wl1-jp-t_firmware
𝑥
≤ 3.0
moxaiologik_2542_firmware
𝑥
≤ 3.0
moxaiologik_2542-t_firmware
𝑥
≤ 3.0
moxaiologik_2542-hspa_firmware
𝑥
≤ 3.0
moxaiologik_2542-hspa-t_firmware
𝑥
≤ 3.0
moxaiologik_2542-wl1-eu_firmware
𝑥
≤ 3.0
moxaiologik_2542-wl1-eu-t_firmware
𝑥
≤ 3.0
moxaiologik_2542-wl1-us_firmware
𝑥
≤ 3.0
moxaiologik_2542-wl1-us-t_firmware
𝑥
≤ 3.0
moxaiologik_2542-wl1-jp_firmware
𝑥
≤ 3.0
moxaiologik_2542-wl1-jp-t_firmware
𝑥
≤ 3.0
𝑥
= Vulnerable software versions