CVE-2019-6518 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2019-6518

Analyzed

More Info Official Page

Source-ics-cert@hq.dhs.gov

Published At-05 Mar, 2019 | 20:29

Updated At-19 Oct, 2020 | 17:51

Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

>>iks-g6824a_firmware>>Versions up to 4.5(inclusive)

cpe:2.3:o:moxa:iks-g6824a_firmware:*:*:*:*:*:*:*:*

>>iks-g6824a>>-

cpe:2.3:h:moxa:iks-g6824a:-:*:*:*:*:*:*:*

>>eds-405a_firmware>>Versions up to 3.8(inclusive)

cpe:2.3:o:moxa:eds-405a_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:moxa:eds-405a:-:*:*:*:*:*:*:*

>>eds-408a_firmware>>Versions up to 3.8(inclusive)

cpe:2.3:o:moxa:eds-408a_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:moxa:eds-408a:-:*:*:*:*:*:*:*

>>eds-510a_firmware>>Versions up to 3.8(inclusive)

cpe:2.3:o:moxa:eds-510a_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:moxa:eds-510a:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-311	Primary	nvd@nist.gov
CWE-256	Secondary	ics-cert@hq.dhs.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/107178	ics-cert@hq.dhs.gov	Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01	ics-cert@hq.dhs.gov	Third Party Advisory US Government Resource