high7.5
CVE-2019-6520
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.
Impact
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moxa | Iks-G6824a Firmware | through 4.5 |
| Moxa | Eds-405a Firmware | through 3.8 |
| Moxa | Eds-408a Firmware | through 3.8 |
| Moxa | Eds-510a Firmware | through 3.8 |