CVE-2019-6559
Quick assessment
Affected
ICS-CERT Moxa IKS, EDS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Moxa IKS-G6824A series等都是中国台湾摩莎（Moxa）公司的产品。IKS-G6824A series是一款系列机架式以太网交换机。EDS-405A series是一款EDS-405A系列以太网交换机。EDS-408A series是一款EDS-408A系列以太网交换机。 多款Moxa产品中存在安全漏洞。远程攻击者可借助特制的数据包利用该漏洞造成转换器崩溃，导致拒绝服务。以下产品和版本受到影响：Moxa IKS-G6824A series 4.5及之前版本；EDS-405A series
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-6559
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5
Vulnerability Title
多款Moxa产品资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Moxa IKS-G6824A series等都是中国台湾摩莎（Moxa）公司的产品。IKS-G6824A series是一款系列机架式以太网交换机。EDS-405A series是一款EDS-405A系列以太网交换机。EDS-408A series是一款EDS-408A系列以太网交换机。 多款Moxa产品中存在安全漏洞。远程攻击者可借助特制的数据包利用该漏洞造成转换器崩溃，导致拒绝服务。以下产品和版本受到影响：Moxa IKS-G6824A series 4.5及之前版本；EDS-405A series
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ICS-CERT | Moxa IKS, EDS | IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior | - |
|
II. Public POCs for CVE-2019-6559
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-6559
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-6559 (1)
Other References for CVE-2019-6559 (1)
-
https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 x_refsource_MISC
Same Patch Batch · ICS-CERT · 2019-03-05 · 10 CVEs total
| CVE-2019-6518 | 多款Moxa产品信息泄露漏洞 | |
| CVE-2019-6520 | 多款 Moxa 产品安全漏洞 | |
| CVE-2019-6522 | 多款Moxa产品缓冲区错误漏洞 | |
| CVE-2019-6524 | 多款Moxa产品授权问题漏洞 | |
| CVE-2019-6528 | 多款PSI GridConnect GmbH产品跨站脚本漏洞 | |
| CVE-2019-6557 | 多款Moxa产品缓冲区错误漏洞 | |
| CVE-2019-6561 | 多款Moxa产品跨站请求伪造漏洞 | |
| CVE-2019-6563 | 多款Moxa产品信息泄露漏洞 | |
| CVE-2019-6565 | 多款Moxa产品跨站脚本漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-400
-
CVE-2026-104861
probe-image-size: Quadratic-time Denial of Service in the SV -
CVE-2026-104844
PostCSS: Quadratic complexity in flat selector parsing allow -
CVE-2026-95512
Freetype: freetype: denial of service via repeated subroutin -
CVE-2026-103760
Mooncake transfer engine through 0.3.13.post1 Denial of Serv -
CVE-2026-86344
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool
V. Comments for CVE-2019-6559
No comments yet