The vulnerability of microprogrammed software in industrial modems of the OnCell G3470A-LTE Series and WDR-3124A Series, as well as in microprogrammed software for Wi-Fi routers of the TAP-323 Series, WAC-1001 Series, and WAC-2004 Series, arises from the lack of protective measures for website structures. This allows attackers to import any file through the web interface.

🗓️ 01 Sep 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Flaws in microprogrammed software of OnCell and WiFi routers enable remote file import via web interface.

Reporter	Title	Published	Views	Family All 10
0day.today	Moxa Command Injection / Cross Site Scripting Vulnerabilities	1 Sep 202100:00	–	zdt
Circl	CVE-2021-39278	7 Sep 202112:17	–	circl
CNNVD	Moxa多款产品跨站脚本漏洞	1 Sep 202100:00	–	cnnvd
CVE	CVE-2021-39278	7 Sep 202105:39	–	cve
Cvelist	CVE-2021-39278	7 Sep 202105:39	–	cvelist
EUVD	EUVD-2021-25640	7 Oct 202500:30	–	euvd
NVD	CVE-2021-39278	7 Sep 202106:15	–	nvd
Packet Storm	Moxa Command Injection / Cross Site Scripting / Vulnerable Software	1 Sep 202100:00	–	packetstorm
Prion	Cross site scripting	7 Sep 202106:15	–	prion
RedhatCVE	CVE-2021-39278	22 May 202520:43	–	redhatcve

Vulners

Node

moxa moxa_oncell_g3470a-lteRange≤1.7

OR

moxa wdr-3124a_seriesRange≤1.3

OR

moxa tap-323_seriesRange≤1.3

OR

moxa wac-1001_seriesRange≤2.1

OR

moxa wac-2004_seriesRange≤1.6

Source	Link
moxa	www.moxa.com/en/support/product-support/security-advisory/tap-323-wac-1001-2004-wireless-ap-bridge-client-vulnerabilities
moxa	www.moxa.com/en/support/product-support/security-advisory/oncell-g3470a-wdr-3124a-cellular-gateways-router-vulnerabilities
packetstormsecurity	www.packetstormsecurity.com/files/164014
web	www.web.nvd.nist.gov/view/vuln/detail

13 Sep 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 26.4

EPSS0.00907

OnCell G3470A LTE WiFi routers remote file import web interface TAP 323 WAC 1001 WAC 2004 WDR 3124A