CVE-2023-4227 MEDIUM

CVE-2023-4227: ioLogik 4000 Series: Existence of an Unauthorized Service

Vendor Moxa
Product ioLogik 4000 Series
Weakness CWE-489
Published August 24, 2023
Last update October 28, 2024

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which can be exploited by malicious actors to potentially gain unauthorized access to the product. This could lead to security breaches, data theft, and unauthorized manipulation of sensitive information. The vulnerability is attributed to the presence of an unauthorized service, which could potentially enable unauthorized access to the. device.

Key dates

02Disclosure timeline

August 24, 2023 CVE published
October 28, 2024 Record updated