CVE-2015-6464

published 2015-09-11

CVE-2015-6464: The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only…

high 8.5 CVSS 3.1

AV N AC L Au S C N I C A C

The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
moxa	eds-405a_firmware	<= 3.4	—
moxa	eds-408a_firmware	<= 3.4	—