XSS in Ics-cert Moxa Iks, Eds
CVE-2019-6565
Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (63.7th percentile) — read the EPSS interpretation.
Affected products
- Ics-cert Moxa Iks, Eds — versions IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior
Weakness classification (CWE)
References
- ics-cert.us-cert.gov/advisories/ICSA-19-057-01 (x_refsource_MISC)
- 107178 (vdb-entry, x_refsource_BID)