CVE-2019-6524: Critical severity MOXA Iks-g6824a Firmware vulnerability
Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6524?
CVE-2019-6524 has a medium severity rating as it allows attackers to perform brute force attacks due to insufficient failed authentication attempt controls.
How do I fix CVE-2019-6524?
To mitigate CVE-2019-6524, implement account lockout policies to limit failed authentication attempts and regularly update passwords to complex configurations.
Which devices are affected by CVE-2019-6524?
CVE-2019-6524 affects Moxa IKS-G6824A and various EDS firmware versions up to 4.5 and 3.8 respectively.
Can CVE-2019-6524 be exploited remotely?
Yes, CVE-2019-6524 can be exploited remotely as an attacker may perform brute force attacks over the network.
Is there a patch available for CVE-2019-6524?
There is no specific patch mentioned for CVE-2019-6524, but security best practices should be followed to mitigate risks.