Unrated severityNVD Advisory· Published Sep 11, 2015· Updated Jun 17, 2026
CVE-2015-6466
CVE-2015-6466
Description
Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:o:moxa:eds-405a_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:moxa:eds-405a_firmware:*:*:*:*:*:*:*:*range: <=3.4
- cpe:2.3:o:moxa:eds-408a_firmware:*:*:*:*:*:*:*:*range: <=3.4
- Range: <3.6
Patches
Vulnerability mechanics
References
2- www.moxa.com/support/download.aspxnvdPatch
- ics-cert.us-cert.gov/advisories/ICSA-15-246-03nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.