Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-9140

Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulnerability allows OS command injection due

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Moxa

Description

Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulnerability allows OS command injection due to improperly restricted commands, potentially enabling attackers to execute arbitrary code. This poses a significant risk to the system’s security and functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Moxa EDR-8010 Series

Default version status: unaffected

  • 1.0 to ≤ 3.13.1affected

Moxa EDR-G9004 Series

Default version status: unaffected

  • 1.0 to ≤ 3.13.1affected

Moxa EDR-G9010 Series

Default version status: unaffected

  • 1.0 to ≤ 3.13.1affected

Moxa EDF-G1002-BP Series

Default version status: unaffected

  • 1.0 to ≤ 3.13.1affected

Moxa NAT-102 Series

Default version status: unaffected

  • 1.0 to ≤ 1.0.5affected

Moxa OnCell G4302-LTE4 Series

Default version status: unaffected

  • 1.0 to ≤ 3.13affected

Moxa TN-4900 Series

Default version status: unaffected

  • 1.0 to ≤ 3.13affected

References