PT-2017-3775 · Moxa · Moxa Eds+1

Publicado 2017-11-13 · Atualizado 2020-10-19 · CVE-2019-6518

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moxa EDS and IKS (affected versions not specified)

Description The issue is related to the storage of passwords in plaintext, which could allow an attacker to gain unauthorized access to sensitive information. This could potentially be exploited by someone with access to the device, allowing them to read sensitive information.

Recommendations For Moxa EDS and IKS, consider restricting access to the devices to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-256

CWE-311

Identificadores relacionados

BDU:2019-01125

CVE-2019-6518

Produtos afetados

Moxa Eds

Moxa Iks

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-6518 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6518 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 · Nota
• https://moxa.com/en/support/product-support/security-advisory/eds-405a-series-eds-408a-series-eds-510a-series-and-iks-g6824a-series-ethernet-switches-vulnerabilities · Nota
• http://securityfocus.com/bid/107178 · Nota
• https://bdu.fstec.ru/vul/2019-01125 · Nota de Segurança