CVE-2023-4227 — ioLogik 4000 Series: Existence of an Unauthorized Service

Description (CNA)

A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which can be exploited by malicious actors to potentially gain unauthorized access to the product. This could lead to security breaches, data theft, and unauthorized manipulation of sensitive information. The vulnerability is attributed to the presence of an unauthorized service, which could potentially enable unauthorized access to the. device.

Affected (CNA)

Vendor / product	Versions
Moxa / ioLogik 4000 Series	affected 1.0 through 1.6

CWE

CWE-489

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability

CISA-ADP

No English description supplied.

No references supplied.