Moxa IKS, EDS Improper Restriction of Excessive Authentication Attempts (CVE-2019-6524)

Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

CVE-2019-6524

CVE-2019-6524 affects Moxa IKS/EDS industrial switches. The ICS advisory (ICSA-19-057-01) and Tenable plugin summarize brute-force style failures allowing password discovery via excessive authentication attempts. Affected products include IKS-G6824A series (versions 5.6 and earlier) and EDS serie...