CVE-2019-6526

9.8 criticalEPSS 1.0%

Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of sensitive data, which may allow an attacker to capture sensitive data such as an administrative password.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWEs: CWE-319, CWE-311
Published: 2019-04-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moxa:eds-405a_firmware
moxa:eds-408a_firmware
moxa:eds-510a_firmware
moxa:iks-g6824a_firmware

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01
https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01

Check your stack JSON