CVE-2015-6465

2015-09-1116:59:09

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

0.003

Percentile

69.3%

JSON

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service (reboot) via a crafted URL.

Affected configurations

Nvd

Node

moxaeds-405a_firmwareRange≤3.4

moxaeds-408a_firmwareRange≤3.4

AND

moxaeds-405aMatch-

moxaeds-408aMatch-

VendorProductVersionCPE
moxaeds-405a_firmware*cpe:2.3:o:moxa:eds-405a_firmware:*:*:*:*:*:*:*:*
moxaeds-408a_firmware*cpe:2.3:o:moxa:eds-408a_firmware:*:*:*:*:*:*:*:*
moxaeds-405a-cpe:2.3:h:moxa:eds-405a:-:*:*:*:*:*:*:*
moxaeds-408a-cpe:2.3:h:moxa:eds-408a:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moxa	eds-405a_firmware	*	cpe:2.3:o:moxa:eds-405a_firmware::::::::
moxa	eds-408a_firmware	*	cpe:2.3:o:moxa:eds-408a_firmware::::::::
moxa	eds-405a	-	cpe:2.3:h:moxa:eds-405a:-:::::::*
moxa	eds-408a	-	cpe:2.3:h:moxa:eds-408a:-:::::::*