CVE-2019-6563CWE-341

CVE-2019-6563: vulnerability in ICS-CERT Moxa IKS, EDS

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%
Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.
Affected products
ICS-CERT · Moxa IKS, EDS