CVE-2024-0387

🗓️ 26 Feb 2024 13:26:56Reported by MoxaType

The EDS-4000/G4000 Series <v3.2 has un-deactivatable IP forwarding allowing attackers to bypass access controls

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the web-based service for microprogramming software controlling switches of the EDS-4000/G4000 series allows a hacker to send requests to a vulnerable device and act on its behalf for other network devices.	27 Feb 202400:00	–	bdu_fstec
Circl	CVE-2024-0387	14 Mar 202409:21	–	circl
CNNVD	MOXA EDS-4000/G4000 Series 安全漏洞	26 Feb 202400:00	–	cnnvd
CNVD	MOXA EDS-4000/G4000 Series Security Bypass Vulnerability	1 Mar 202400:00	–	cnvd
Cvelist	CVE-2024-0387 EDS-4000/G4000 Series IP Forwarding Vulnerability	26 Feb 202413:26	–	cvelist
EUVD	EUVD-2024-16183	3 Oct 202520:07	–	euvd
NVD	CVE-2024-0387	26 Feb 202416:27	–	nvd
Prion	Design/Logic Flaw	26 Feb 202416:27	–	prion
Positive Technologies	PT-2024-1844 · Unknown · Eds-4000/G4000 Series	26 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-0387	23 May 202509:32	–	redhatcve

NVD

Node

moxa eds-4008_firmwareRange≤3.2

AND

moxa eds-4008Match-

Node

moxa eds-4009_firmwareRange≤3.2

AND

moxa eds-4009Match-

Node

moxa eds-4012_firmwareRange≤3.2

AND

moxa eds-4012Match-

Node

moxa eds-4014_firmwareRange≤3.2

AND

moxa eds-4014Match-

Node

moxa eds-g4008_firmwareRange≤3.2

AND

moxa eds-g4008Match-

Node

moxa eds-g4012_firmwareRange≤3.2

AND

moxa eds-g4012Match-

Node

moxa eds-g4014_firmwareRange≤3.2

AND

moxa eds-g4014Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "EDS-4008 Series",
    "vendor": "Moxa",
    "versions": [
      {
        "lessThanOrEqual": "3.2",
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EDS-4009 Series",
    "vendor": "Moxa",
    "versions": [
      {
        "lessThanOrEqual": "3.2",
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EDS-4012 Series",
    "vendor": "Moxa",
    "versions": [
      {
        "lessThanOrEqual": "3.2",
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EDS-4014 Series",
    "vendor": "Moxa",
    "versions": [
      {
        "lessThanOrEqual": "3.2",
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EDS-G4008 Series",
    "vendor": "Moxa",
    "versions": [
      {
        "lessThanOrEqual": "3.2",
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EDS-G4012 Series",
    "vendor": "Moxa",
    "versions": [
      {
        "lessThanOrEqual": "3.2",
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EDS-G4014 Series",
    "vendor": "Moxa",
    "versions": [
      {
        "lessThanOrEqual": "3.2",
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
moxa	www.moxa.com/en/support/product-support/security-advisory/mpsa-237129-eds-4000-g4000-series-ip-forwarding-vulnerability

17 Jun 2026 06:53Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.00538

SSVC

CWE-1188