← CVE Intelligence

CVE-2019-6520

ICS-CERT / Moxa IKS, EDS PUBLISHED

Description (CNA)

Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.

Affected (CNA)

Vendor / productVersions
ICS-CERT / Moxa IKS, EDSaffected IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.