Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.
| CVE | CVE-2019-6563 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 1.8% en 30 días (percentil 77) |
| CWE | CWE-341, CWE-916 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Productos afectados (catálogo NVD)
moxa/eds-405amoxa/eds-405a_firmwaremoxa/eds-408amoxa/eds-408a_firmwaremoxa/eds-510amoxa/eds-510a_firmwaremoxa/iks-g6824amoxa/iks-g6824a_firmware