CVEvulnerability
CVE-2019-6524
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-307
Description
Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.
Affected configurations
• moxa iks-g6824a firmware (<= 4.5)
• moxa eds-405a firmware (<= 3.8)
• moxa eds-408a firmware (<= 3.8)
• moxa eds-510a firmware (<= 3.8)
Related
Weakness · CWE (1)
- CWE-307 Improper Restriction of Excessive Authentication Attempts weakness
References
- http://www.securityfocus.com/bid/107178 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/107178 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 Third Party Advisory, US Government Resource