Advisories · Technology
ICS-CERT Moxa IKS, EDS.
Every CVE that names ICS-CERT Moxa IKS, EDS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Cross-site scripting in ICS-CERT Moxa IKS, EDS
- ICS-CERT Moxa IKS, EDS
- Cross-site scripting (XSS)
-
Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.
- ICS-CERT Moxa IKS, EDS
- CWE-341
-
Cross-site request forgery in ICS-CERT Moxa IKS, EDS
- ICS-CERT Moxa IKS, EDS
- Cross-site request forgery (CSRF)
-
Uncontrolled resource consumption in ICS-CERT Moxa IKS, EDS
- ICS-CERT Moxa IKS, EDS
- Denial of service
-
Buffer overflow in ICS-CERT Moxa IKS, EDS
- ICS-CERT Moxa IKS, EDS
- Memory corruption
-
Unlimited authentication attempts in ICS-CERT Moxa IKS, EDS
- ICS-CERT Moxa IKS, EDS
- Authentication bypass
-
Out-of-bounds read in ICS-CERT Moxa IKS, EDS
- ICS-CERT Moxa IKS, EDS
- Memory corruption
-
Improper access control in ICS-CERT Moxa IKS, EDS
- ICS-CERT Moxa IKS, EDS
- Broken access control
-
Plaintext password storage in ICS-CERT Moxa IKS, EDS
- ICS-CERT Moxa IKS, EDS
- CWE-256