CVE-2019-6522
First published: Tue Mar 05 2019(Updated: )
Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot.
Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moxa Iks-g6824a Firmware | <=4.5 | |
| Moxa IKS-G6824A | ||
| Moxa Eds-405a Firmware | <=3.8 | |
| Moxa EDS-405A | ||
| Moxa Eds-408a Firmware | <=3.8 | |
| Moxa Eds-408a | ||
| Moxa Eds-510a Firmware | <=3.8 | |
| Moxa Eds-510a | ||
| All of | ||
| Moxa Iks-g6824a Firmware | <=4.5 | |
| Moxa IKS-G6824A | ||
| All of | ||
| Moxa Eds-405a Firmware | <=3.8 | |
| Moxa EDS-405A | ||
| All of | ||
| Moxa Eds-408a Firmware | <=3.8 | |
| Moxa Eds-408a | ||
| All of | ||
| Moxa Eds-510a Firmware | <=3.8 | |
| Moxa Eds-510a |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/type
- agent/severity
- agent/weakness
- agent/first-publish-date
- agent/description
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/moxa
- canonical/moxa iks-g6824a firmware
- version/moxa iks-g6824a firmware/4.5
- canonical/moxa iks-g6824a
- canonical/moxa eds-405a firmware
- version/moxa eds-405a firmware/3.8
- canonical/moxa eds-405a
- canonical/moxa eds-408a firmware
- version/moxa eds-408a firmware/3.8
- canonical/moxa eds-408a
- canonical/moxa eds-510a firmware
- version/moxa eds-510a firmware/3.8
- canonical/moxa eds-510a