CVE-2019-6565: Moxa Eds-405a Firmware

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.

Affected products

• Moxa Eds-405a Firmware: up to and including 3.8
• Moxa Eds-408a Firmware: up to and including 3.8
• Moxa Eds-510a Firmware: up to and including 3.8
• Moxa Iks-g6824a Firmware: up to and including 4.5

Published 2019-03-05. Last modified 2026-06-17.