Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2024-9138

Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Moxa

Description

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability, CVE-2024-9138. This vulnerability involves hard-coded credentials, enabling an authenticated user to escalate privileges and gain root-level access to the system, posing a significant security risk.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moxa EDR-810 Series

Default version status: unaffected

  • 1.0 to ≤ 5.12.37affected

Moxa EDR-8010 Series

Default version status: unaffected

  • 1.0 to ≤ 3.13.1affected

Moxa EDR-G902 Series

Default version status: unaffected

  • 1.0 to ≤ 5.7.25affected

Moxa EDR-G903 Series

Default version status: unaffected

  • 1.0 to ≤ 5.7.25affected

Moxa EDR-G9004 Series

Default version status: unaffected

  • 1.0 to ≤ 3.13.1affected

Moxa EDR-G9010 Series

Default version status: unaffected

  • 1.0 to ≤ 3.13.1affected

Moxa EDF-G1002-BP Series

Default version status: unaffected

  • 1.0 to ≤ 3.13.1affected

Moxa NAT-102 Series

Default version status: unaffected

  • 1.0 to ≤ 1.0.5affected

Moxa OnCell G4302-LTE4 Series

Default version status: unaffected

  • 1.0 to ≤ 3.13affected

Moxa TN-4900 Series

Default version status: unaffected

  • 1.0 to ≤ 3.13affected

References