Buffer overflow in Ics-cert Moxa Iks, Eds

CVE-2019-6557

Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.

Vulnerability class: Buffer Overflow

EPSS: 0.069 (91.6th percentile) — read the EPSS interpretation.

Affected products

Ics-cert Moxa Iks, Eds — versions IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

ics-cert.us-cert.gov/advisories/ICSA-19-057-01 (x_refsource_MISC)
107178 (vdb-entry, x_refsource_BID)