Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A…

Description

Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of sensitive data, which may allow an attacker to capture sensitive data such as an administrative password.

Scores

EPSS (exploitation in 30 days)

1.00% · top 37% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

• CWE-311: Missing encryption of sensitive data CWE-311 (opens in a new tab)All about CWE-311 and its CVEs
• CWE-319 (opens in a new tab)All about CWE-319 and its CVEs

Affected products

• Moxa · IKS, EDS

  • affected IKS-G6824A series Versions 4.5 and prior
  • affected EDS-405A series Version 3.8 and prior
  • affected EDS-408A series Version 3.8 and prior
  • affected and EDS-510A series Version 3.8 and prior

References (1)

• https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2019-6526](https://trackcve.app/badge/CVE-2019-6526.svg)](https://trackcve.app/cve/CVE-2019-6526)

Record last updated 4 Aug 2024, 20:23 UTC.