CVE Feed

    Dashboard / CVE / CVE-2016-8359

    CVE-2016-8359

    An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware Version V2.3 and prior, ioLogik E1241, firmware Version V2.4 and prior, ioLogik E1242, firmware Version V2.4 and prior, ioLogik E1260, firmware Version V2.4 and prior, ioLogik E1262, firmware Version V2.4 and prior, ioLogik E2210, firmware versions prior to V3.13, ioLogik E2212, firmware versions prior to V3.14, ioLogik E2214, firmware versions prior to V3.12, ioLogik E2240, firmware versions prior to V3.12, ioLogik E2242, firmware versions prior to V3.12, ioLogik E2260, firmware versions prior to V3.13, and ioLogik E2262, firmware versions prior to V3.12. The web application fails to sanitize user input, which may allow an attacker to inject script or execute arbitrary code (CROSS-SITE SCRIPTING).

    Published:Feb 13, 2017
    Last Modified:Apr 20, 2025
    EPS:Feb 13, 2017
    EPSS Score:0.00486
    CVSS Score:6.1

    Affected Products

    Vendor
    Moxa
    Product
    Iologik E1200 Series Firmware
    Vendor
    Moxa
    Product
    Iologik E1210
    Vendor
    Moxa
    Product
    Iologik E1211
    Vendor
    Moxa
    Product
    Iologik E1212
    Vendor
    Moxa
    Product
    Iologik E1213
    Vendor
    Moxa
    Product
    Iologik E1214
    Vendor
    Moxa
    Product
    Iologik E1240
    Vendor
    Moxa
    Product
    Iologik E1241
    Vendor
    Moxa
    Product
    Iologik E1242
    Vendor
    Moxa
    Product
    Iologik E1260
    Vendor
    Moxa
    Product
    Iologik E1262
    Vendor
    Moxa
    Product
    Iologik E2200 Series Firmware
    Vendor
    Moxa
    Product
    Iologik E2210
    Vendor
    Moxa
    Product
    Iologik E2212
    Vendor
    Moxa
    Product
    Iologik E2214
    Vendor
    Moxa
    Product
    Iologik E2240
    Vendor
    Moxa
    Product
    Iologik E2242
    Vendor
    Moxa
    Product
    Iologik E2260
    Vendor
    Moxa
    Product
    Iologik E2262

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High