CVE-2015-6464

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-09-11 · updated 2026-06-17

Description

The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin.

Affected products

Moxa Eds-405A Firmware: through 3.4
Moxa Eds-408A Firmware: through 3.4

References

http://www.moxa.com/support/download.aspx?type=support&id=328
https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03
http://www.moxa.com/support/download.aspx?type=support&id=328
https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03

Get alerted when CVE-2015-6464 or the next vulnerability affects your stack