CVE-2015-6466

published 2015-09-11

CVE-2015-6466: Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
moxa	eds-405a_firmware	<= 3.4	—
moxa	eds-408a_firmware	<= 3.4	—

CWE-79