CVE-2019-6563 Weak cryptography in Moxa IKS, EDS

Critical 9.8 Published 5 Mar 2019 Updated 16 Sep 2024

Predictable MD5-based cookies allow attackers to capture administrator passwords and fully compromise Moxa industrial network devices.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-6563?

CVE-2019-6563 is a critical vulnerability in ICS-CERT Moxa IKS, EDS, published on 5 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.

Weakness: CWE-916, CWE-341

Which versions are affected by CVE-2019-6563?

It affects 4 products.

Products include Moxa Eds-405a Firmware, Moxa Eds-408a Firmware, Moxa Eds-510a Firmware, Moxa Iks-G6824a Firmware.

How do I fix CVE-2019-6563?

No fix has been published for CVE-2019-6563 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-6563 being exploited?

There is no known exploitation of CVE-2019-6563 in the wild and no public exploit code.

Sources

Also known as GHSA-v7jq-vcf5-vrr7.