CVE-2015-6465

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service (reboot) via a crafted URL.

Metrics

CVSS 2.0 6.8/10AV:N/AC:L/Au:S/C:N/I:N/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.moxa.com/support/download.aspx?type=support&id=328Patch
http://www.securitytracker.com/id/1033543
https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03Third Party Advisory, US Government Resource
http://www.moxa.com/support/download.aspx?type=support&id=328Patch
http://www.securitytracker.com/id/1033543
https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03Third Party Advisory, US Government Resource

Timeline

Published: Sep 11, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-64664.3Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A swi CVE-2015-64678.1Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin.CVE-2015-64686.8Cross-site request forgery (CSRF) vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the au CVE-2015-64695.0The interpreter in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allows remote attackers to discover script source code via unspecified ve CVE-2015-64705.5Resource Data Management Data Manager before 2.2 allows remote authenticated users to modify arbitrary passwords via unspecified vectors.CVE-2015-64715.3Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize paddi CVE-2015-64729.8WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.CVE-2015-64739.8WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.CVE-2015-64745.0IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to discover cleartext passwords by reading HTML source code.CVE-2015-64754.3Multiple cross-site scripting (XSS) vulnerabilities in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to inject arbi CVE-2015-647610.0Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware befo CVE-2015-64776.1Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application in Nordex Control 2 (NC2) SCADA 16 and earlier allow