ioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability

published 2023-12-23 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-58233

cvss: 6.5; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 20%
public exploits: 0; none known

A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization.

Patch / fix

fixed in 10

moxa iologik_e1210_firmware 3.3
moxa iologik_e1211_firmware 3.3
moxa iologik_e1212_firmware 3.3
moxa iologik_e1213_firmware 3.3
moxa iologik_e1214_firmware 3.3
moxa iologik_e1240_firmware 3.3
moxa iologik_e1241_firmware 3.3
moxa iologik_e1242_firmware 3.3
moxa iologik_e1260_firmware 3.3
moxa iologik_e1262_firmware 3.3

Exploit prediction

0.28% chance of exploitation in the next 30 days, higher than 20% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD	3.1	6.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Moxa ioLogik E1200 Series

Classification

Weakness

CWE-328 Use of Weak Hash
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

References

moxa.com /en/support/product-support/security-advisory/mpsa-235250-iologik-e1200-series-web-server-vulnerability
vendor-advisory

Sources

CVE List CVE-2023-5962
NVD CVE-2023-5962

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary