Skip to content
OpenAdvisories
High NCSC-2024-0407 2 CVEs

Kwetsbaarheden verholpen in Moxa systemen

Published Oct 14, 2024 · Updated Oct 14, 2024 · nl

Vendor: Moxa Product: EDF-G1002-BP Series Product: EDR-8010 Series Product: EDR-G9004 Series Product: EDR-G9010 Series Product: NAT-102 Series Product: OnCell G4302-LTE4 Series Product: TN-4900 Series

Summary

Moxa heeft kwetsbaarheden verholpen in diverse netwerkcomponenten.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om configuraties aan te passen en willekeurige code uit te voeren op het kwetsbare systeem.

Oplossingen
Moxa heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 2

  • Critical 9.4
    CVE-2024-9137

    Moxa Service Missing Authentication for Critical Function

    The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files a…

    Moxa EDR-G9010 Series TN-4900 Series NAT-102 Series ICS / OT
  • High 7.2
    CVE-2024-9139

    OS Command Injection in Restricted Command

    The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.

    Moxa EDR-G9010 Series TN-4900 Series NAT-102 Series ICS / OT

Revision history

  1. #0

    Initiele versie

References

  • Reference - cveprojectv5; nvd
    https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241154-missing-authentication-and-os-command-injection-vulnerabilities-in-routers-and-network-security-appliances