critical9.8
CVE-2019-6563
Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a…
Impact
Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moxa | Iks-G6824a Firmware | through 4.5 |
| Moxa | Eds-405a Firmware | through 3.8 |
| Moxa | Eds-408a Firmware | through 3.8 |
| Moxa | Eds-510a Firmware | through 3.8 |