eds-510a_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/eds-510a_firmware/ Sun, 26 Feb 2023 06:33:58 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png eds-510a_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/eds-510a_firmware/ 32 32 CVE-2019-6557 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6557/ Sun, 26 Feb 2023 06:33:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6557/ Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.

The post CVE-2019-6557 appeared first on CVE Vulnerability.

]]> Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.

The post CVE-2019-6557 appeared first on CVE Vulnerability.

]]> CVE-2019-6559 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6559/ Sun, 26 Feb 2023 06:33:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6559/ Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash.

The post CVE-2019-6559 appeared first on CVE Vulnerability.

]]> Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash.

The post CVE-2019-6559 appeared first on CVE Vulnerability.

]]> CVE-2019-6561 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6561/ Sun, 26 Feb 2023 06:33:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6561/ Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device.

The post CVE-2019-6561 appeared first on CVE Vulnerability.

]]> Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device.

The post CVE-2019-6561 appeared first on CVE Vulnerability.

]]> CVE-2019-6563 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6563/ Sun, 26 Feb 2023 06:33:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6563/ Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator’s password, which could lead to a full compromise of the device.

The post CVE-2019-6563 appeared first on CVE Vulnerability.

]]> Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator’s password, which could lead to a full compromise of the device.

The post CVE-2019-6563 appeared first on CVE Vulnerability.

]]> CVE-2019-6565 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6565/ Sun, 26 Feb 2023 06:33:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6565/ Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.

The post CVE-2019-6565 appeared first on CVE Vulnerability.

]]> Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.

The post CVE-2019-6565 appeared first on CVE Vulnerability.

]]> CVE-2019-6518 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6518/ Sun, 26 Feb 2023 06:33:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6518/ Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.

The post CVE-2019-6518 appeared first on CVE Vulnerability.

]]> Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.

The post CVE-2019-6518 appeared first on CVE Vulnerability.

]]> CVE-2019-6520 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6520/ Sun, 26 Feb 2023 06:33:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6520/ Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.

The post CVE-2019-6520 appeared first on CVE Vulnerability.

]]> Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.

The post CVE-2019-6520 appeared first on CVE Vulnerability.

]]> CVE-2019-6522 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6522/ Sun, 26 Feb 2023 06:33:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6522/ Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot.

The post CVE-2019-6522 appeared first on CVE Vulnerability.

]]> Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot.

The post CVE-2019-6522 appeared first on CVE Vulnerability.

]]> CVE-2019-6524 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6524/ Sun, 26 Feb 2023 06:33:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6524/ Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.

The post CVE-2019-6524 appeared first on CVE Vulnerability.

]]> Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.

The post CVE-2019-6524 appeared first on CVE Vulnerability.

]]> CVE-2019-6526 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6526/ Sun, 26 Feb 2023 06:33:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6526/ Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of sensitive data, which may allow an attacker to capture sensitive data such as an administrative password.

The post CVE-2019-6526 appeared first on CVE Vulnerability.

]]> Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of sensitive data, which may allow an attacker to capture sensitive data such as an administrative password.

The post CVE-2019-6526 appeared first on CVE Vulnerability.

]]>