CVEvulnerability
CVE-2019-6522
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:L/Au:N/C:P/I:N/A:C
- Weaknesses
- CWE-125
Description
Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot.
Affected configurations
• moxa iks-g6824a firmware (<= 4.5)
• moxa eds-405a firmware (<= 3.8)
• moxa eds-408a firmware (<= 3.8)
• moxa eds-510a firmware (<= 3.8)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- http://www.securityfocus.com/bid/107178 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/107178 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 Third Party Advisory, US Government Resource