CVE-2019-6557

CWE-120 — Classic Buffer Overflow CWE-119 — Buffer Overflow3 documents3 sources

Severity

9.8CRITICAL

EPSS

6.9%

top 8.60%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Moxa Eds-405a Firmware Moxa Eds-408a Firmware Moxa Eds-510a Firmware +1 more

Timeline

PublishedMar 5

Latest updateMay 13

Description

Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶NVDmoxa/eds-405a_firmware3.8

▶NVDmoxa/eds-408a_firmware3.8

▶NVDmoxa/eds-510a_firmware3.8

▶NVDmoxa/iks-g6824a_firmware4.5

🔴Vulnerability Details

GHSA

GHSA-cgrr-xgfh-rgv2: Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution↗2022-05-13

▶

CVEList

CVE-2019-6557: Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution↗2019-03-05

▶