CVE-2015-6464

Published: Sep 11, 2015Modified: May 6, 2026

8.5

Vector

AV:N/AC:L/Au:S/C:N/I:C/A:C

Exploitability: 8.0 / Impact: 9.2

Source: NVD

Description

The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin.

Affected (2)

Products: Moxa: Eds 405a Firmware, Eds 408a Firmware

Moxa

2 products

Eds 405a Firmware

Eds 408a Firmware

Configuration A

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Moxa Eds 405a Firmware	Up to 3.4
Moxa Eds 408a Firmware	Up to 3.4

Running on/with	Platform Versions
Moxa Eds 405a	All versions
Moxa Eds 408a	All versions

References (4)

http://www.moxa.com/support/download.aspx?type=support&id=328

Source: ics-cert@hq.dhs.gov

Patch

https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

http://www.moxa.com/support/download.aspx?type=support&id=328

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.