CVE-2019-6518 Information disclosure in Moxa IKS, EDS
Moxa IKS and EDS devices store passwords in plaintext, allowing attackers with device access to read sensitive credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-6518?
CVE-2019-6518 is a high-severity vulnerability in ICS-CERT Moxa IKS, EDS, published on 5 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.
Which versions are affected by CVE-2019-6518?
It affects 4 products.
Products include Moxa Eds-405a Firmware, Moxa Eds-408a Firmware, Moxa Eds-510a Firmware, Moxa Iks-G6824a Firmware.
How do I fix CVE-2019-6518?
No fix has been published for CVE-2019-6518 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-6518 being exploited?
There is no known exploitation of CVE-2019-6518 in the wild and no public exploit code.
Other vulnerabilities in ICS-CERT Moxa IKS, EDS
Sources
Also known as GHSA-v4hf-m89f-x363.