CVE-2019-6520

🗓️ 05 Mar 2019 21:00:00Reported by icscertType

Moxa IKS & EDS lack proper authority checks, allowing read-only users to make config changes

Reporter	Title	Published	Views	Family All 7
CNVD	Moxa IKS and EDS Improper Access Control Vulnerability	27 Feb 201900:00	–	cnvd
Cvelist	CVE-2019-6520	5 Mar 201921:00	–	cvelist
EUVD	EUVD-2019-16079	7 Oct 202500:30	–	euvd
ICS	Moxa IKS, EDS (Update A)	26 Feb 201900:00	–	ics
NVD	CVE-2019-6520	5 Mar 201920:29	–	nvd
Prion	Design/Logic Flaw	5 Mar 201920:29	–	prion
Tenable Nessus	Moxa IKS, EDS Improper Access Control (CVE-2019-6520)	2 Aug 202300:00	–	nessus

NVD

Vulners

Node

moxa iks-g6824a_firmwareRange≤4.5

AND

moxa iks-g6824aMatch-

Node

moxa eds-405a_firmwareRange≤3.8

AND

moxa eds-405aMatch-

Node

moxa eds-408a_firmwareRange≤3.8

AND

moxa eds-408aMatch-

Node

moxa eds-510a_firmwareRange≤3.8

AND

moxa eds-510aMatch-

[
  {
    "product": "Moxa IKS, EDS",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-19-057-01
securityfocus	www.securityfocus.com/bid/107178

21 Nov 2024 04:46Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.00284

CWE-284