CVE-2019-6523

WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands.

• CWE-89

• http://www.securityfocus.com/bid/106722Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-19-024-01Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/106722Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-19-024-01Third Party Advisory, US Government Resource

Published

Feb 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6517BD FACSLyric Research Use Only, Windows 10 Professional Oper…6.8
• CVE-2019-6518Moxa IKS and EDS store plaintext passwords, which may allow …7.5
• CVE-2019-6519WebAccess/SCADA, Version 8.3. An improper authentication vul…
• CVE-2019-6520Moxa IKS and EDS does not properly check authority on server…7.5
• CVE-2019-6521WebAccess/SCADA, Version 8.3. Specially crafted requests cou…
• CVE-2019-6522Moxa IKS and EDS fails to properly check array bounds which …9.1
• CVE-2019-6524Moxa IKS and EDS do not implement sufficient measures to pre…9.8
• CVE-2019-6525AVEVA Wonderware System Platform 2017 Update 2 and prior use…8.8
• CVE-2019-6526Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A seri…9.8
• CVE-2019-6527PR100088 Modbus gateway versions prior to Release R02 (or So…9.8
• CVE-2019-6528PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontr…8.8
• CVE-2019-6529An attacker could specially craft an FTP request that could …4.9