CVE-2019-6526

<= 3.8

Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and E

9.8CRITICAL

CVE-2019-6565

<= 3.8

Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform

6.1MEDIUM

CVE-2019-6563

<= 3.8

Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's pa

9.8CRITICAL

CVE-2019-6561

<= 3.8

Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on t

8.8HIGH

CVE-2019-6559

<= 3.8

Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the

6.5MEDIUM

CVE-2019-6557

<= 3.8

Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.

9.8CRITICAL

CVE-2019-6524

<= 3.8

Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attac

9.8CRITICAL

CVE-2019-6522

<= 3.8

Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, an

9.1CRITICAL

CVE-2019-6520

<= 3.8

Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitra

7.5HIGH

CVE-2019-6518

<= 3.8

Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.

7.5HIGH

CVE-2015-6466

<= 3.4

Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and ED

CVE-2015-6465

<= 3.4

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause

CVE-2015-6464

<= 3.4

The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users