Moxa Alerts Users to High-Severity Vulnerabilities in Cellular and Secure Routers

Taiwan-based Moxa has warned of two security vulnerabilities impacting its cellular routers, secure routers, and network security appliances that could allow privilege escalation and command execution. The list of vulnerabilities is as follows - CVE-2024-9138 CVSS 4.0 score: 8.6 - A hard-coded...

Vulnerabilities fixed in Moxa's cellular routers and network security devices

Moxa has fixed vulnerabilities in Moxa's cellular routers and network security devices Specifically, CVE-2024-9138 and CVE-2024-9140. Vulnerability CVE-2024-9138 involves hard-coded credentials that allow authenticated users to escalate their privileges, ultimately leading to root access. This...

The vulnerability of Moxa EDR-8010, EDR-G9004, EDR-G9010, EDF-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900 network devices arises from the failure to eliminate special elements used in the operating system’s command structure. This allows attackers to execute arbitrary code.

The vulnerability of Moxa EDR-8010, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900 network devices stems from the lack of measures taken to neutralize special commands used in the operating system. Exploiting this vulnerability allows a malicious actor to execute...

CVE-2024-9138

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a...

CVE-2024-9140

Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulnerability allows OS command injection due to improperly restricted commands, potentially enabling attackers to execute arbitrary code. This poses a significan...

CVE-2024-9140

CVE-2024-9140 affects Moxa’s cellular routers, secure routers, and network security appliances. The issue is an OS command injection caused by improperly restricted commands, enabling an attacker to execute arbitrary code. Public details confirm affected product families and firmware-impacting wo...

CVE-2024-9140

Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulnerability allows OS command injection due to improperly restricted commands, potentially enabling attackers to execute arbitrary code. This poses a significan...

CVE-2024-9140

Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulnerability allows OS command injection due to improperly restricted commands, potentially enabling attackers to execute arbitrary code. This poses a significan...

CVE-2024-9138 Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a...

CVE-2024-9138

Moxa CVE-2024-9138 affects cellular routers, secure routers, and network security appliances. A hard-coded credential flaw enables an authenticated user to escalate to root-level access, per multiple sources. Impact can include system compromise, unauthorized modifications, data exposure, or serv...

CVE-2024-9138 Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a...

Moxa多款产品 安全漏洞

MOXA EDR-810 and others are products of China-based Moxa MOXA.MOXA EDR-810 is a secure router.MOXA EDR-G902 is an industrial security router device.MOXA EDR-8010 is a secure router. A security vulnerability exists in several Moxa products that stems from the use of hard-coded credentials. An...

PT-2025-1001 · Moxa · Moxa Secure Routers +2

Name of the Vulnerable Software and Affected Versions: Moxa cellular routers, secure routers, and network security appliances versions 3.13.1 and earlier Description: The vulnerability allows OS command injection due to improperly restricted commands, potentially enabling attackers to execute...

CVE-2024-9404

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxacmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing...

CVE-2024-9404 Denial-of-Service Vulnerability

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxacmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing...

CVE-2024-9404 Denial-of-Service Vulnerability

This vulnerability could lead to denial-of-service or service crashes. Exploitation of the moxacmd service, because of insufficient input validation, allows attackers to disrupt operations. If exposed to public networks, the vulnerability poses a significant remote threat, potentially allowing...

CVE-2024-9404

CVE-2024-9404 concerns a DoS vulnerability in MOXA devices caused by insufficient input validation in the moxa_cmd service, leading to potential service disruption or crashes when exposed to networks. The initial CVE entry documents a high-severity impact with CVSS scores (3.1: 7.5/ HIGH and 4.0:...

MOXA VPort 07-3 Series 安全漏洞

MOXA VPort 07-3 Series is a series of network cameras from China-based MOXA. A security vulnerability exists in MOXA VPort 07-3 Series version 1.0, which stems from insufficient input validation and could lead to a denial of service condition or cause a service crash...

Moxa EDR-G903 Series Routers EDR Cryptographic Issues (CVE-2012-4694)

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for 1 SSH and 2 SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation...

PT-2024-10001 · Moxa · Moxa Ip Cameras +1

Name of the Vulnerable Software and Affected Versions: Moxa VPort 07-3 version 1.0 Description: The issue is related to insufficient input validation in the moxa cmd service, which can be exploited to disrupt operations, potentially leading to a denial-of-service condition or service crash. If th...