CVE-2019-6524 - AskarLabs CVE Database

CVE-2019-6524

Vendor Ics-Cert

Product Moxa IKS, EDS

Weakness CWE-307 · Brute force

Published March 5, 2019

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.

Key dates

02Disclosure timeline

March 5, 2019 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-6524 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/307.html

Related vulnerabilities

04Related CVE

CVE-2023-38273 IBM Cloud Pak System information disclosure CVE-2022-39314 User enumeration in the code-based login and password reset forms CVE-2024-11126 Digistar AG-30 Plus Login Page excessive authentication CVE-2023-45009 WordPress Captcha for Contact Form 7 plugin <= 1.11.3 - Capcha Bypass vulnerability CVE-2026-41213 @node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes