CVE-2024-9138 Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances

🗓️ 03 Jan 2025 08:14:31Reported by MoxaType

vulnrichment🔗 github.com👁 22 Views

High-severity vulnerability CVE-2024-9138 allows privilege escalation in Moxa routers and appliances.

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerabilities of the microprogrammed Ethernet switch software from Moxa series, including EDR-810, EDR-8010, EDR-G902, EDR-G903, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900, are related to the use of weak security mechanisms. These vulnerabilities allow attackers to exploit them to gain increased privileges.	22 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-9138	3 Jan 202508:23	–	circl
CNNVD	Moxa多款产品安全漏洞	3 Jan 202500:00	–	cnnvd
CVE	CVE-2024-9138	3 Jan 202508:14	–	cve
Cvelist	CVE-2024-9138 Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances	3 Jan 202508:14	–	cvelist
EUVD	EUVD-2024-50434	3 Oct 202520:07	–	euvd
HackRead	Critical Vulnerabilities in Moxa Routers Allow Root Privilege Escalation	8 Jan 202509:05	–	hackread
NCSC	Vulnerabilities fixed in Moxa's cellular routers and network security devices	6 Jan 202507:49	–	ncsc
NVD	CVE-2024-9138	3 Jan 202509:15	–	nvd
Positive Technologies	PT-2025-1200 · Moxa · Edr-G9010 +9	3 Jan 202500:00	–	ptsecurity

Source	Link
moxa	www.moxa.com/en/support/product-support/security-advisory/mpsa-241155-privilege-escalation-and-os-command-injection-vulnerabilities-in-cellular-routers,-secure-routers,-and-netwo

03 Jan 2025 08:14Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.2

CVSS 48.6

EPSS0.01155

SSVC

vulnerability privilege escalation moxa routers network security appliances hard-coded credentials