CVE-2015-6465
medium
CVSS v3
—
CVSS v2
6.8
VIR risk
6.8
Description
The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service (reboot) via a crafted URL.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: ics-cert@hq.dhs.gov — http://www.moxa.com/support/download.aspx?type=support&id=328
References
- http://www.moxa.com/support/download.aspx?type=support&id=328
- http://www.securitytracker.com/id/1033543
- https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03
- http://www.moxa.com/support/download.aspx?type=support&id=328
- http://www.securitytracker.com/id/1033543
- https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03
Verify integrity in audit chain (admin only). AS-IS.