Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-4641 EUVD-2024-44245GHSA-9jqr-jfvv-cj9j

OnCell G3470A-LTE Series: Authenticated Format String Errors

Published Jun 25, 2024 · Updated Aug 1, 2024 · Assigned by Moxa

Description

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to accepting a format string from an external source as an argument. An attacker could modify an externally controlled format string to cause a memory leak and denial of service.

Affected products

VendorProductAffectedFixed
Moxa OnCell G3150A-LTE Series 1.0 – ≤ 1.7.7 —

References