CVE-2019-6520

published 2019-03-05

CVE-2019-6520: Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I H A N

Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
moxa	eds-405a_firmware	<= 3.8	—
moxa	eds-408a_firmware	<= 3.8	—
moxa	eds-510a_firmware	<= 3.8	—
moxa	iks-g6824a_firmware	<= 4.5	—

CWE-284