2 CVEs publicados el 2022-05-13 · CVSS máximo 9.8/10.
Productos afectados (catálogo NVD)
moxa/eds-405amoxa/eds-405a_firmwaremoxa/eds-408amoxa/eds-408a_firmwaremoxa/eds-510amoxa/eds-510a_firmwaremoxa/iks-g6824amoxa/iks-g6824a_firmware
CVEs de este lote
| CVE | Severidad | CVSS | EPSS | Estado | Descripción |
|---|---|---|---|---|---|
| CVE-2019-6524 | CRITICAL | 9.8 | 2.7% | Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack. | |
| CVE-2019-6563 | CRITICAL | 9.8 | 1.8% | Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device. |