Moxa IKS, EDS Predictable From Observable State (CVE-2019-6563)

Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

CVE-2019-6563

CVE-2019-6563 affects Moxa IKS and EDS industrial switches. The issue is a predictable cookie generated with an MD5 hash, which can enable an attacker to capture the administrator’s password and potentially achieve full device compromise. Affected products include IKS-G6824A (v5.6 and prior), EDS...

CVE-2019-6563

Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device...