CVEDB API

Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.1%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2019-6561

Moxa » Eds-405a » Version: N/A

cpe:2.3:h:moxa:eds-405a:-
Moxa » Eds-408a » Version: N/A

cpe:2.3:h:moxa:eds-408a:-
Moxa » Eds-510a » Version: N/A

cpe:2.3:h:moxa:eds-510a:-
Moxa » Iks-G6824a » Version: N/A

cpe:2.3:h:moxa:iks-g6824a:-
Moxa » Eds-405a Firmware » Version: 3.8

cpe:2.3:o:moxa:eds-405a_firmware:3.8
Moxa » Eds-408a Firmware » Version: 3.8

cpe:2.3:o:moxa:eds-408a_firmware:3.8
Moxa » Eds-510a Firmware » Version: 3.8

cpe:2.3:o:moxa:eds-510a_firmware:3.8
Moxa » Iks-G6824a Firmware » Version: 4.5

cpe:2.3:o:moxa:iks-g6824a_firmware:4.5