CVE-2019-6524

Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 47%
VendorProductVersion
moxaiks-g6824a_firmware
𝑥
≤ 4.5
moxaeds-405a_firmware
𝑥
≤ 3.8
moxaeds-408a_firmware
𝑥
≤ 3.8
moxaeds-510a_firmware
𝑥
≤ 3.8
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/107178
https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01
http://www.securityfocus.com/bid/107178
https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01