CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

107178 - Moxa IKS and EDS ICSA-19-057-01 Multiple Security Vulnerabilities(2019-02-26)

This page lists CVE entries related to this Bugtraq ID, using CVE reference matching. For more information about this BID please visit Bugtraq entry details at http://www.securityfocus.com/bid/107178

Related CVE Entries

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2019-6518 200 +Info 2019-03-05 2019-10-09
5.0
None Remote Low Not required Partial None None
Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.
2 CVE-2019-6520 284 2019-03-05 2019-10-09
5.0
None Remote Low Not required None Partial None
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.
3 CVE-2019-6522 125 2019-03-05 2019-10-09
8.5
None Remote Low Not required Partial None Complete
Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot.
4 CVE-2019-6524 287 2019-03-05 2019-10-09
5.0
None Remote Low Not required Partial None None
Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.
5 CVE-2019-6557 119 Exec Code Overflow 2019-03-05 2019-10-09
7.5
None Remote Low Not required Partial Partial Partial
Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.
6 CVE-2019-6559 400 DoS 2019-03-05 2019-10-09
4.0
None Remote Low Single system None None Partial
Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash.
7 CVE-2019-6561 352 CSRF 2019-03-05 2019-10-09
6.8
None Remote Medium Not required Partial Partial Partial
Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device.
8 CVE-2019-6563 200 +Info 2019-03-05 2019-10-09
10.0
None Remote Low Not required Complete Complete Complete
Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.
9 CVE-2019-6565 79 XSS 2019-03-05 2019-10-09
4.3
None Remote Medium Not required None Partial None
Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.