ZeroHour

CVE-2019-6565

CVSS 3.1
6.1 medium
EPSS
1%p63
Published
()
Modified
Description

Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.

Vendors
moxa
Products
iks-g6824a firmware, eds-405a firmware, eds-408a firmware, eds-510a firmware
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.