https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:23:00.053730+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-01120 bdu:2019-01120 2026-10-03T11:23:00.061797+00:00 bdu:2019-01120 https://cve.radiocsirt.org/vuln/cnvd-2019-06179 cnvd-2019-06179 2026-10-03T11:23:00.061835+00:00 cnvd-2019-06179 https://cve.radiocsirt.org/vuln/euvd-2026-169048 EUVD-2026-169048 2026-10-03T11:23:00.061851+00:00 EUVD-2026-169048 https://cve.radiocsirt.org/vuln/fkie_cve-2019-6520 fkie_cve-2019-6520 2026-10-03T11:23:00.061862+00:00

Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.

 https://cve.radiocsirt.org/vuln/ghsa-5m99-qg5r-pvv8 GHSA-5m99-qg5r-pvv8 2026-10-03T11:23:00.061889+00:00

Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.

 https://cve.radiocsirt.org/vuln/gsd-2019-6520 gsd-2019-6520 2026-10-03T11:23:00.061904+00:00 gsd-2019-6520 https://cve.radiocsirt.org/vuln/icsa-19-057-01 ICSA-19-057-01 — Moxa IKS, EDS (Update A) 2026-10-03T11:23:00.061915+00:00

Several buffer overflow vulnerabilities have been identified, which may allow remote code execution.CVE-2019-6557 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). A cross-site request forgery has been identified, which may allow for the execution of unauthorized actions on the device.CVE-2019-6561 has been assigned to this vulnerability. A CVSS v3 base score of 9.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The device fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.CVE-2019-6565 has been assigned to this vulnerability. A CVSS v3 base score of 9.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The device does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.CVE-2019-6520 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The devices do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.CVE-2019-6524 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calc…