{"id":"CVE-2023-5962","state":"PUBLISHED","title":"ioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability","description":"A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization.","publishedAt":"2023-12-23T09:09:01.920Z","updatedAt":"2024-10-28T06:14:46.184Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"Moxa"},"assigner":"Moxa","products":["Moxa ioLogik E1200 Series"],"affected":[{"vendor":"Moxa","product":"ioLogik E1200 Series","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThanOrEqual":"3.3","versionType":"custom"}]}],"references":["https://www.moxa.com/en/support/product-support/security-advisory/mpsa-235250-iologik-e1200-series-web-server-vulnerability"],"weaknesses":["CWE-328"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/5xxx/CVE-2023-5962.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-5962","state":"PUBLISHED","datePublished":"2023-12-23T09:09:01.920Z","dateUpdated":"2024-10-28T06:14:46.184Z","assignerShortName":"Moxa","assignerOrgId":"2e0a0ee2-d866-482a-9f5e-ac03d156dbaa","dateReserved":"2023-11-06T07:47:33.243Z"},"containers":{"cna":{"title":"ioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability","descriptions":[{"lang":"en","value":"A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization."}],"affected":[{"vendor":"Moxa","product":"ioLogik E1200 Series","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThanOrEqual":"3.3","versionType":"custom"}]}],"references":[{"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-235250-iologik-e1200-series-web-server-vulnerability","tags":["vendor-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-328","description":"CWE-328: Use of Weak Hash","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Moxa","orgId":"2e0a0ee2-d866-482a-9f5e-ac03d156dbaa","dateUpdated":"2024-10-28T06:14:46.184Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"Reza Rashidi from HADESS"}],"impacts":[{"capecId":"CAPEC-20","descriptions":[{"lang":"en","value":"CAPEC-20: Encryption Brute Forcing"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Moxa has developed appropriate solutions to address the vulnerabilities. The solutions for affected products are shown below. </p><p></p><ul><li>ioLogik E1200 Series : Please contact Moxa Technical Support for the <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.moxa.com/tw/support/technical-support\">security patch (v3.3.7).</a></li></ul><p></p>"}],"value":"Moxa has developed appropriate solutions to address the vulnerabilities. The solutions for affected products are shown below. \n\n\n\n  *  ioLogik E1200 Series : Please contact Moxa Technical Support for the  security patch (v3.3.7). https://www.moxa.com/tw/support/technical-support"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-235250-iologik-e1200-series-web-server-vulnerability","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T08:14:25.146Z"}}]}}}