CVE-2023-5961
High
Description
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. An attacker can exploit this vulnerability to trick a client into making an unintentional request to the web server, which will be treated as an authentic request. This vulnerability may lead an attacker to perform operations on behalf of the victimized user.
SeverityHigh
CVSS8.8
Exploit probability—
ProductMoxa Iologik E1210 Firmware
PublishedDec 23, 2023
First seenDec 23, 2023
Weakness typeCWE-352Cross-site request forgery (CSRF)
How to fix
Update
- moxa iologik_e1210_firmware3.3 or later
- moxa iologik_e1211_firmware3.3 or later
- moxa iologik_e1212_firmware3.3 or later
- moxa iologik_e1213_firmware3.3 or later
- moxa iologik_e1214_firmware3.3 or later
- moxa iologik_e1240_firmware3.3 or later
- moxa iologik_e1241_firmware3.3 or later
- moxa iologik_e1242_firmware3.3 or later
- moxa iologik_e1260_firmware3.3 or later
- moxa iologik_e1262_firmware3.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moxa iologik_e1210_firmware | v < 3.3 | 3.3 |
| moxa iologik_e1211_firmware | v < 3.3 | 3.3 |
| moxa iologik_e1212_firmware | v < 3.3 | 3.3 |
| moxa iologik_e1213_firmware | v < 3.3 | 3.3 |
| moxa iologik_e1214_firmware | v < 3.3 | 3.3 |
| moxa iologik_e1240_firmware | v < 3.3 | 3.3 |
| moxa iologik_e1241_firmware | v < 3.3 | 3.3 |
| moxa iologik_e1242_firmware | v < 3.3 | 3.3 |
| moxa iologik_e1260_firmware | v < 3.3 | 3.3 |
| moxa iologik_e1262_firmware | v < 3.3 | 3.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.