Summary
Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Moxa Router ausnutzen, um Dateien zu manipulieren und beliebigen Code auszuführen.
Product
Moxa Router sind Router für industrielle Anwendungen die darauf ausgelegt sind, in anspruchsvollen Umgebungen zuverlässige und sichere Netzwerkkonnektivität zu bieten.
Vulnerabilities 2
-
Critical 9.4
Moxa Service Missing Authentication for Critical Function
The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files a…
-
High 7.2
OS Command Injection in Restricted Command
The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code.
Revision history
-
#4
Neue Updates von moxa aufgenommen
-
#3
Neue Updates von moxa aufgenommen
-
#2
Neue Updates von moxa aufgenommen
-
#1
Initiale Fassung
References
-
Moxa Security Advisories vom 2024-10-13
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241154-missing-authentication-and-os-command-injection-vulnerabilities-in-routers-and-network-security-appliances
-
Moxa Security Advisory MPSA-241156 vom 2025-01-17
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241156-cve-2024-9137-missing-authentication-vulnerability-in-ethernet-switches
-
Moxa Security Advisory MPSA-240933 vom 2025-02-20
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240933-cve-2024-9404-denial-of-service-vulnerability-identified-in-multiple-pt-switches
-
Moxa Security Advisory MPSA-259471 vom 2025-12-15
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-259471-security-enhancement-ssh-weak-algorithms-supported