CVE-2019-6522

published 2019-03-05

CVE-2019-6522: Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to…

critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I N A H

Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
moxa	eds-405a_firmware	<= 3.8	—
moxa	eds-408a_firmware	<= 3.8	—
moxa	eds-510a_firmware	<= 3.8	—
moxa	iks-g6824a_firmware	<= 4.5	—

CWE-125