title: ioLogik 4000 Series: Session Headers Not Implemented
description: A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.
problem types: CWE-1021: Improper Restriction of Rendered UI Layers or Frames
affected:
{
defaultStatus: unaffected
product: ioLogik 4000 Series
vendor: Moxa
versions:
lessThanOrEqual: 1.6, status: affected, version: 1.0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Moxa has developed appropriate solutions to address the vulnerabilities. The solutions for affected products are shown below.
*  ioLogik 4000 Series (ioLogik E4200): Please contact Moxa Technical Support for the security patch.