← Zuruck zu CVEs
CVE-2019-6561
HIGH8.8
Beschreibung
Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device.
CVE Details
CVSS v3.1 Bewertung8.8
SchweregradHIGH
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionREQUIRED
Veroffentlicht3/5/2019
Zuletzt geandert11/21/2024
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
moxa:eds-405amoxa:eds-405a_firmwaremoxa:eds-408amoxa:eds-408a_firmwaremoxa:eds-510amoxa:eds-510a_firmwaremoxa:iks-g6824amoxa:iks-g6824a_firmware
Schwachen (CWE)
CWE-352CWE-352
Referenzen
http://www.securityfocus.com/bid/107178(ics-cert@hq.dhs.gov)
https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01(ics-cert@hq.dhs.gov)
http://www.securityfocus.com/bid/107178(af854a3a-2127-422b-91ae-364da2661108)
https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.