Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-0387

EDS-4000/G4000 Series IP Forwarding Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Moxa

Description

The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moxa EDS-4008 Series

Default version status: unaffected

  • 1.0 to ≤ 3.2affected

Moxa EDS-4009 Series

Default version status: unaffected

  • 1.0 to ≤ 3.2affected

Moxa EDS-4012 Series

Default version status: unaffected

  • 1.0 to ≤ 3.2affected

Moxa EDS-4014 Series

Default version status: unaffected

  • 1.0 to ≤ 3.2affected

Moxa EDS-G4008 Series

Default version status: unaffected

  • 1.0 to ≤ 3.2affected

Moxa EDS-G4012 Series

Default version status: unaffected

  • 1.0 to ≤ 3.2affected

Moxa EDS-G4014 Series

Default version status: unaffected

  • 1.0 to ≤ 3.2affected

References