Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2024-9139

OS Command Injection in Restricted Command

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Moxa

Description

The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moxa EDR-8010 Series

Default version status: unaffected

  • 1.0 to ≤ 3.12.1affected

Moxa EDR-G9004 Series

Default version status: unaffected

  • 1.0 to ≤ 3.12.1affected

Moxa EDR-G9010 Series

Default version status: unaffected

  • 1.0 to ≤ 3.12.1affected

Moxa EDF-G1002-BP Series

Default version status: unaffected

  • 1.0 to ≤ 3.12.1affected

Moxa NAT-102 Series

Default version status: unaffected

  • 1.0 to ≤ 1.0.5affected

Moxa OnCell G4302-LTE4 Series

Default version status: unaffected

  • 1.0 to ≤ 3.9affected

Moxa TN-4900 Series

Default version status: unaffected

  • 1.0 to ≤ 3.6affected

Moxa EDR-810 Series

Default version status: unaffected

  • 1.0 to ≤ 5.12.33affected

References