CVE-2019-6520CWE-284

CVE-2019-6520: vulnerability in ICS-CERT Moxa IKS, EDS

Published · Updated

Follow this CVE+ Monitor Moxa IKS, EDS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.
Affected products
ICS-CERT · Moxa IKS, EDS
Related CVEs — ICS-CERT Moxa IKS, EDS

In the same product, most dangerous first.

CVE-2019-6557—CVE-2019-6557EPSS 5.0%CVE-2019-6524—CVE-2019-6524EPSS 2.7%CVE-2019-6522—CVE-2019-6522EPSS 2.5%CVE-2019-6559—CVE-2019-6559EPSS 2.4%CVE-2019-6563—CVE-2019-6563EPSS 1.7%CVE-2019-6518—CVE-2019-6518EPSS 1.2%