Login Request a demo
MI
Product
Moxa IKS, EDS
by ICS-CERT · last CVE Mar 5, 2019
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 4High 3Medium 2Low 0
Severity
All severities9Critical4High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Moxa IKS, EDS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-6561
8.8
1%
Mar 5
Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device
Affected: IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior
CVE-2019-6520
7.5
2%
Mar 5
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes
Affected: IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior
CVE-2019-6518
7.5
1%
Mar 5
Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device
Affected: IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior
Showing 3