Description
The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Moxa EDR-8010 Series
Default version status: unaffected
1.0 to ≤ 3.12.1affected
Moxa EDR-G9004 Series
Default version status: unaffected
1.0 to ≤ 3.12.1affected
Moxa EDR-G9010 Series
Default version status: unaffected
1.0 to ≤ 3.12.1affected
Moxa EDF-G1002-BP Series
Default version status: unaffected
1.0 to ≤ 3.12.1affected
Moxa NAT-102 Series
Default version status: unaffected
1.0 to ≤ 1.0.5affected
Moxa OnCell G4302-LTE4 Series
Default version status: unaffected
1.0 to ≤ 3.9affected
Moxa TN-4900 Series
Default version status: unaffected
1.0 to ≤ 3.6affected
Moxa EDS-608 Series
Default version status: unaffected
1.0 to ≤ 3.12affected
Moxa EDS-611 Series
Default version status: unaffected
1.0 to ≤ 3.12affected
Moxa EDS-616 Series
Default version status: unaffected
1.0 to ≤ 3.12affected
Moxa EDS-619 Series
Default version status: unaffected
1.0 to ≤ 3.12affected
Moxa EDS-405A Series
Default version status: unaffected
1.0 to ≤ 3.14affected3.14.4unaffected
Moxa EDS-408A Series
Default version status: unaffected
1.0 to ≤ 3.12affected3.14.6unaffected
Moxa EDS-505A Series
Default version status: unaffected
1.0 to ≤ 3.11affected
Moxa EDS-508A Series
Default version status: unaffected
1.0 to ≤ 3.11affected
Moxa EDS-510A Series
Default version status: unaffected
1.0 to ≤ 3.12affected
Moxa EDS-516A Series
Default version status: unaffected
1.0 to ≤ 3.11affected
Moxa EDS-518A Series
Default version status: unaffected
1.0 to ≤ 3.11affected
Moxa EDS-G509 Series
Default version status: unaffected
1.0 to ≤ 3.10affected
Moxa EDS-P510 Series
Default version status: unaffected
1.0 to ≤ 3.11affected
Moxa EDS-P510A Series
Default version status: unaffected
1.0 to ≤ 3.11affected
Moxa EDS-510E Series
Default version status: unaffected
1.0 to ≤ 5.5affected
Moxa EDS-518E Series
Default version status: unaffected
1.0 to ≤ 6.3affected
Moxa EDS-528E Series
Default version status: unaffected
1.0 to ≤ 6.3affected
Moxa EDS-G508E Series
Default version status: unaffected
1.0 to ≤ 6.4affected
Moxa EDS-G512E Series
Default version status: unaffected
1.0 to ≤ 6.4affected
Moxa EDS-G516E Series
Default version status: unaffected
1.0 to ≤ 6.4affected
Moxa EDS-P506E Series
Default version status: unaffected
1.0 to ≤ 5.8affected
Moxa ICS-G7526A Series
Default version status: unaffected
1.0 to ≤ 5.10affected
Moxa ICS-G7528A Series
Default version status: unaffected
1.0 to ≤ 5.10affected
Moxa ICS-G7748A Series
Default version status: unaffected
1.0 to ≤ 5.9affected
Moxa ICS-G7750A Series
Default version status: unaffected
1.0 to ≤ 5.9affected
Moxa ICS-G7752A Series
Default version status: unaffected
1.0 to ≤ 5.9affected
Moxa ICS-G7826A Series
Default version status: unaffected
1.0 to ≤ 5.10affected
Moxa ICS-G7828A Series
Default version status: unaffected
1.0 to ≤ 5.10affected
Moxa ICS-G7848A Series
Default version status: unaffected
1.0 to ≤ 5.9affected
Moxa ICS-G7850A Series
Default version status: unaffected
1.0 to ≤ 5.9affected
Moxa ICS-G7852A Series
Default version status: unaffected
1.0 to ≤ 5.9affected
Moxa IKS-G6524A Series
Default version status: unaffected
1.0 to ≤ 5.10affected
Moxa IKS-6726A Series
Default version status: unaffected
1.0 to ≤ 5.9affected
Moxa IKS-6728A Series
Default version status: unaffected
1.0 to ≤ 5.9affected
Moxa IKS-G6824A Series
Default version status: unaffected
1.0 to ≤ 5.10affected
Moxa SDS-3006 Series
Default version status: unaffected
1.0 to ≤ 3.0affected
Moxa SDS-3008 Series
Default version status: unaffected
1.0 to ≤ 3.0affected
Moxa SDS-3010 Series
Default version status: unaffected
1.0 to ≤ 3.0affected
Moxa SDS-3016 Series
Default version status: unaffected
1.0 to ≤ 3.0affected
Moxa SDS-G3006 Series
Default version status: unaffected
1.0 to ≤ 3.0affected
Moxa SDS-G3008 Series
Default version status: unaffected
1.0 to ≤ 3.0affected
Moxa SDS-G3010 Series
Default version status: unaffected
1.0 to ≤ 3.0affected
Moxa SDS-G3016 Series
Default version status: unaffected
1.0 to ≤ 3.0affected
Moxa PT-7728 Series
Default version status: unaffected
1.0 to ≤ 3.9affected
Moxa PT-7828 Series
Default version status: unaffected
1.0 to ≤ 4.0affected
Moxa PT-G503 Series
Default version status: unaffected
1.0 to ≤ 5.3affected
Moxa PT-G510 Series
Default version status: unaffected
1.0 to ≤ 6.5affected
Moxa PT-G7728 Series
Default version status: unaffected
1.0 to ≤ 6.4affected
Moxa PT-G7828 Series
Default version status: unaffected
1.0 to ≤ 6.4affected
Moxa TN-4500A Series
Default version status: unaffected
1.0 to ≤ 3.13affected
Moxa TN-5500A Series
Default version status: unaffected
1.0 to ≤ 3.13affected
Moxa TN-G4500 Series
Default version status: unaffected
1.0 to ≤ 5.5affected
Moxa TN-G6500 Series
Default version status: unaffected
1.0 to ≤ 5.5affected
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241154-missing-authentication-and-os-command-injection-vulnerabilities-in-routers-and-network-security-appliances ↗
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241156-cve-2024-9137-missing-authentication-vulnerability-in-ethernet-switches ↗