Moxa IKS, EDS (Update A)

🗓️ 26 Feb 2019 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 117 Views

Moxa IKS, EDS (Update A) contains multiple critical vulnerabilities including Classic Buffer Overflow, Cross-site Request Forgery, Cross-site Scripting, Improper Access Controls, and more

Reporter	Title	Published	Views	Family All 91
BDU FSTEC	The vulnerability of the microprogramming software of the Moxa IKS-G6824A switch allows a intruder to execute arbitrary code.	22 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Moxa IKS-G6824A switch allows a intruder to gain unauthorized access to the device.	22 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Moxa IKS-G6824A switch allows a intruder to perform a cross-site scripting attack.	22 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Moxa IKS-G6824A switch allows a intruder to gain unauthorized access to the device.	22 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Moxa IKS-G6824A switch allows a intruder to gain unauthorized access to protected information or trigger a device restart.	22 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the microprogrammed software of Moxa EDS-405A, Moxa EDS-408A, and Moxa EDS-510A allow a hacker to trigger a service failure.	22 Mar 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the microprogramming software of Moxa EDS and IKS switches, allowing attackers to bypass authentication procedures	22 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software used in Moxa EDS and IKS switches allows a intruder to gain unauthorized access to protected information.	22 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software used in Moxa EDS and IKS switches allows a intruder to gain unauthorized access to protected information.	22 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software used in Moxa EDS and IKS switches allows a intruder to gain unauthorized access to protected information.	22 Mar 201900:00	–	bdu_fstec

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-057-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-19-057-01
us-cert	www.us-cert.gov/cas/tips/ST04-014.html
us-cert	www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

26 Feb 2019 00:00Current

10High risk

Vulners AI Score10

CVSS 210

CVSS 3.19.8

EPSS0.06913