CVE-2019-6524

Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-03-05

Last modified

2024-09-16

Weaknesses

CWE-307

Affected products

• Eds (Ics-cert)
• Moxa Iks (Ics-cert)
• Eds-405a Firmware (Moxa)
• Eds-408a Firmware (Moxa)
• Eds-510a Firmware (Moxa)
• Iks-g6824a Firmware (Moxa)

References

• http://www.securityfocus.com/bid/107178
• https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01