← Volver a CVEs
CVE-2019-6518
HIGH7.5
Descripcion
Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.
Detalles CVE
Puntuacion CVSS v3.17.5
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado3/5/2019
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0
Productos afectados
moxa:eds-405amoxa:eds-405a_firmwaremoxa:eds-408amoxa:eds-408a_firmwaremoxa:eds-510amoxa:eds-510a_firmwaremoxa:iks-g6824amoxa:iks-g6824a_firmware
Debilidades (CWE)
CWE-256CWE-311
Referencias
http://www.securityfocus.com/bid/107178(ics-cert@hq.dhs.gov)
https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01(ics-cert@hq.dhs.gov)
http://www.securityfocus.com/bid/107178(af854a3a-2127-422b-91ae-364da2661108)
https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.